# Thessaloniki–Thessaly Gas Supply Company S.A.: Insufficient data processing agreement

- Type: Enforcement
- Source: Hellenic Data Protection Authority (HDPA)
- Date: 2025-12-31
- Original: https://www.enforcementtracker.com/ETid-3016
- Canonical: https://overview.legal/posts/52370
- Topics: Controllers, Processing Agreement, Processors, Data Processor, Processing, Supervisory Authorities, Direct Marketing, Personal Data, Law Enforcement, Marketing

## Summary

The Greek DPA has imposed a fine of EUR 10,000 on Thessaloniki–Thessaly Gas Supply Company S.A. The controller, an energy provider, used external processors for direct marketing via telephone. The controller forwarded complaints by data subjects to the external processors, but failed to ensure, that the processors response was adequate, gernerally failing to adequatly controll processors.

## Full text

The Greek DPA has imposed a fine of EUR 10,000 on Thessaloniki–Thessaly Gas Supply Company S.A. The controller, an energy provider, used external processors for direct marketing via telephone. The controller forwarded complaints by data subjects to the external processors, but failed to ensure, that the processors response was adequate, gernerally failing to adequatly controll processors.

GDPR Articles: Art. 28 (3) GDPR, Art. 32 (2), (4) GDPR
Industry: Transportation and Energy

---
Generated by overview.legal · https://overview.legal/posts/52370 · 2026-08-22