Tietosuojavaltuutetun toimisto (Finland) - 3425/157/2019

From GDPRhub
Revision as of 08:44, 14 August 2020 by Ilkku (talk | contribs) (Created page with "{{DPAdecisionBOX |Jurisdiction=Finland |DPA-BG-Color= |DPAlogo=LogoFI.png |DPA_Abbrevation=Tietosuojavaltuutetun toimisto |DPA_With_Country=Tietosuojavaltuutetun toimisto (Fi...")
(diff) ← Older revision | Latest revision (diff) | Newer revision → (diff)
Tietosuojavaltuutetun toimisto - 3425/157/2019
LogoFI.png
Authority: Tietosuojavaltuutetun toimisto (Finland)
Jurisdiction: Finland
Relevant Law: Article 12 GDPR
Type: Complaint
Outcome: Upheld
Started:
Decided: 23.07.2020
Published:
Fine: None
Parties: n/a
National Case Number/Name: 3425/157/2019
European Case Law Identifier: n/a
Appeal: Unknown
Original Language(s): Finnish
Original Source: Finlex (in FI)
Initial Contributor: n/a

Finnish DPA held that controller should have acquired data subject's consent before sending direct marketing communications to the data subject's work pone

English Summary

Facts

A data subject filed a complaint with the Finnish DPA regarding Acc Consulting company's direct marketing practices. Data subject received direct marketing communications to their work phone. The SMS had a number that the data subject should call to unsubscribe. The data subject tried calling, but no one answered.

Dispute

DPA considered the following legal questions: 1) Has the controller sent out direct marketing communications? 2) If yes, was the marketing communication directed at a legal or a natural person? 3) Had the controller given the data subject the right to object to direct marketing as per Article 12 GDPR.


Holding

DPA held that the controller had sent out direct marketing communications and that it was directed towards a natural person under section 200 subsection 1, and thusly the controller would have needed the data subject's prior consent. The controller must give the data subject an opportunity to unsubscribe easily and without payment.

The controller must correct its direct marketing communications practice and is obliged to notify the DPA of any changes.

The decision is not final.

Comment

Share your comments here!

Further Resources

Share blogs or news articles here!

English Machine Translation of the Decision

The decision below is a machine translation of the Finnish original. Please refer to the Finnish original for more details.