Details:
| Summary | After the claimant did alledgedly not pay back a microcredit to an online credit agany, the claim was assigned to the debt collecting agancy. Subsequently, the latter startet sending emails not only to email addresses provided by the claimant but also to an institutional email address of his workplace accessible by any co-worker which was never provided by the claimant. |
| Link: | link |
| Related articles: | Art. 5 (1) f) GDPR |
| Type: | Insufficient legal basis for data processing |
| Fine: | EUR 60,000 |
| Sector | Finance, Insurance and Consulting |
All data is based on The CMS’s Law GDPR Enforcement Tracker Source: https://www.enforcementtracker.com/