DSB (Austria) · 24 November 2025
Online store
Name not published.
About: Accountability, Data principles, Data subject rights, Unlawful processing
FineNo fineViolation found
- Regulator
- DSB (Austria)
- Decided
- 24 November 2025
- Country
- Austria
- Sector
- Not given
- Regulator’s reference
- 2025-0.950.759
- Fino case number
- 2025/AT/032
What happened
The DPA held that an online store unlawfully required customers to select their gender identity. According to the DPA, this was not necessary for the proper performance of a contract with its customers or for its legitimate interest to personally address them.
Summary from GDPRhub (noyb), written by its volunteers, not by Fino. CC BY-NC-SA 4.0.
Rules involved
- Art. 5Principles relating to processing of personal data5(1)(b) · 5(1)(c)Read →
- Art. 6Lawfulness of processing6(1)(b) · 6(1)(f)Read →
- Art. 16Right to rectificationRead →
- Art. 17Right to erasure (‘right to be forgotten’)Read →
- Art. 25Data protection by design and by defaultRead →
- Accountability
- Data principles
- Data subject rights
- Unlawful processing
Sources
The facts on this page come from the sources above, as they recorded them. Nothing has been estimated or filled in. Not legal advice.
Spotted a mistake? Write to angelillolorenzo@gmail.com and quote 2025/AT/032.