Skip to content
News·GDPRhubEN
Export

US Zagreb - Us I-3380/2025-9

A court upheld a DPA decision finding that a controller violated Articles 12(1) and 15 GDPR by failing to maintain a functioning email address for access requests.

Full text

Machine translation of the decision, via GDPRhub — not the official text.

A court upheld a DPA decision finding that a controller violated Articles 12(1) and 15 GDPR by failing to maintain a functioning email address for access requests. English Summary. Facts. A fast-food franchise company operating Pizza Hut restaurants in Croatia (the controller), published a privacy policy on its website informing users that they could exercise their data protection rights either by email at a designated email address or by post to its registered office. On 12 May 2025, an individual (the data subject) sent an access request under Article 15 GDPR]] to the designated email address, seeking confirmation and information regarding all personal data processed about them. The data subject immediately received an automated error response indicating that the controller’s email address was not found or was unable to receive emails. On 16 May 2025, the data subject lodged a complaint with the Croatian Personal Data Protection Agency (the DPA), enclosing copies of the sent email an

How it connects

W101 2326836-1 40 natural persons submitted access requests to a mobile communications provider (controller) via an attorney Some of these persons were (former) customers of the controller, others have never been in a contractual relationship with the controller. In the access requests, the data… BVwG - W101 2326836-1 ·Federal Administrative Court Oct 2, 2026 Personal Data Right of Access Right to Restriction
C/09/697386 / HA ZA 26-52 Den Haag District Court: 51 gamblers sue Unibet operator Risepoint over unanswered GDPR The District Court of The Hague (the Court) considered an action brought by 51 individuals who had participated in online gambling offered through the website Unibet before 1… Rb. Den Haag Sep 2, 2026 Right of Access Personal Data Data Portability
200.361.079/01 Court of Appeal Den Haag: gambling operator must disclose transaction data under Art. 15 The data subject submitted an access request, in electronic format, of his gambling data to Risepoint Limited (the controller), the operator of online gambling services in the… Sep 29, 2026 Personal Data Data Portability Right of Access
€100,000 HDPA fines Teleperformance for failing to properly handle employee access request The DPA received a complaint from a former employee of the Service 800 Teleperformance Single Member S.A. (the controller), after the controller failed to comply with the data… Greece ·Art. 5, 12, 13 +3 Personal Data Right of Access Storage Limitation
Danish DPA finds employer unlawfully refused former employee's access request The DPA received a complaint from a former employee (data subject) of the controller concerning the refusal of an access request. More specifically, the data subject was dismissed… 2025-31-2078 ·Denmark ·Datatilsynet (DK) Sep 24, 2026 Right of Access Personal Data Supervisory Authorities
RON 5,242 Spitalul Veterinar Tineretului SRL A data subject filed an access request with the veterinary clinic Spitalul Veterinar Tineretului SRL (controller) concerning copies of a telephone conversation and video… Romania ·ANSPDCP ·Art. 15 Oct 13, 2026 Personal Data Right of Access Controllers