# Piraeus Bank S.A.: Insufficient legal basis for data processing

- Type: Enforcement
- Source: Hellenic Data Protection Authority (HDPA)
- Date: 2025-06-23
- Original: https://www.enforcementtracker.com/ETid-2728
- Canonical: https://overview.legal/posts/48843
- Topics: Personal Data, Controllers, Processing Agreement, Insurance, Processing, Data Controller, Supervisory Authorities

## Summary

The Hellenic DPA has imposed a fine of EUR 50,000 on Piraeus Bank S.A.The controller has processed personal data even though the data subject rightfully opposed the the data processing.

## Full text

The Hellenic DPA has imposed a fine of EUR 50,000 on Piraeus Bank S.A.The controller has processed personal data even though the data subject rightfully opposed the the data processing.

GDPR Articles: Art. 5 (1) a), d) GDPR, Art. 6 GDPR
Industry: Finance, Insurance and Consulting

---
Generated by overview.legal · https://overview.legal/posts/48843 · 2026-08-22