# INFINITE STYLES SERVICES CO. LIMITED: Insufficient legal basis for data processing

- Type: Enforcement
- Source: French Data Protection Authority (CNIL)
- Date: 2025-09-01
- Original: https://www.enforcementtracker.com/ETid-2864
- Canonical: https://overview.legal/posts/48979
- Topics: Cookies, Controllers, Processing Agreement, Personal Data, Consent, Processing, Supervisory Authorities, Data Controller, Law Enforcement

## Summary

The French DPA has imposed a fine of EUR 150,000,000 on INFINITE STYLES SERVICES CO. LIMITED, which operates under the name 'SHEIN'. The controller used cookies unlawfully on its website. Firstly, the controller failed to obtain the data subject's consent before placing cookies. Second, the controller used incomplete cookie banners. Third, the controller failed to provide adequate second-level information. Finally, the controller's mechanisms for refusing or withdrawing consent were inadequate.

## Full text

The French DPA has imposed a fine of EUR 150,000,000 on INFINITE STYLES SERVICES CO. LIMITED, which operates under the name 'SHEIN'. The controller used cookies unlawfully on its website. Firstly, the controller failed to obtain the data subject's consent before placing cookies. Second, the controller used incomplete cookie banners. Third, the controller failed to provide adequate second-level information. Finally, the controller's mechanisms for refusing or withdrawing consent were inadequate.

GDPR Articles: Art. 82 loi Informatique et Libertés
Industry: Industry and Commerce

---
Generated by overview.legal · https://overview.legal/posts/48979 · 2026-08-22