Thessaloniki–Thessaly Gas Supply Company S.A.: Insufficient data processing agreement

The Greek DPA has imposed a fine of EUR 10,000 on Thessaloniki–Thessaly Gas Supply Company S.A. The controller, an energy provider, used external processors for direct marketing via telephone. The controller forwarded complaints by data subjects to the external processors, but failed to ensure, that the processors response was adequate, gernerally failing to adequatly controll processors.

GDPR Articles: Art. 28 (3) GDPR, Art. 32 (2), (4) GDPR
Industry: Transportation and Energy