N***Group AG

What happened

The Austrian Data Protection Authority (DSB) held that a Swiss based company violated Articles 13 and 14 GDPR by not providing all information required in the email sent for its newsletter subscription to the complainant and even failed to provide such information later, in the course of the proceeding before the DSB.

Summary from GDPRhub (noyb), written by its volunteers, not by Fino. CC BY-NC-SA 4.0.

Rules involved

• Art. 3Territorial scope3(2)(a) · 3(3)Read →
• Art. 4Definitions4(7)Read →
• Art. 5Principles relating to processing of personal data5(1)(a) · 5(2)Read →
• Art. 12Transparent information, communication and modalities for the exercise of the rights of the data subject12(1) · 12(2) · 12(3)Read →
• Art. 13Information to be provided where personal data are collected from the data subject13(1)(a) · 13(2) · 13(3)Read →
• Art. 15Right of access by the data subject15(1)(e) · 15(1)(f) · 15(3)Read →
• Art. 27Representatives of controllers or processors not established in the Union27(1) · 27(5)Read →
• Art. 57Tasks57(1)(f)Read →
• Art. 58Powers58(1)(b) · 58(2)(c) · 58(2)(d)Read →
• Art. 77Right to lodge a complaint with a supervisory authority77(1)Read →

• Data principles
• Data subject rights
• Transparency