Details:
Summary | The Norwegian DPA has imposed a fine of EUR 900,000 on the fitness chain ‘Sats’. The DPA had received several complaints from customers who had submitted requests for information as well as deletion of their personal data, which Sats had not complied with. The DPA also found that Sats had processed certain customer data without a valid legal basis. |
Link: | link |
Related articles: | Art. 5 (1) a), e) GDPR, Art. 6 (1) GDPR, Art. 12 (1), (3) GDPR, Art. 13 GDPR, Art. 15 GDPR, Art. 17 GDPR |
Type: | Insufficient fulfilment of data subjects rights |
Fine: | EUR 900,000 |
Sector | Industry and Commerce |
All data is based on The CMS’s Law GDPR Enforcement Tracker Source: https://www.enforcementtracker.com/