0 1 minuto de lectura
Source: Facebook/ALDI Hungary
The proceedings of the National Authority for Data Protection and Freedom of Information (Nemzeti Adatvédelmi és Információszabadság Hatóság, NAIH) revealed that Aldi did not only use the recording of birth dates to calculate the age of the customer. This data was stored for 180 days, so that the chain’s data processors had access to it.
Aldi’s practice was considered a data breach by the NAIH. As a result, the retail chain was ordered to pay a HUF 95 million (EUR 250,000) data protection fine, review its age verification practices and publish a privacy notice on data processing at its premises, hvg.hu concludes.
Read also:
Aldi, the supermarket chain, has been fined HUF 95m ($327,000) by Hungary’s National Authority for Data Protection and Freedom of Information for recording customers’ dates of birth when they purchased alcohol and storing the data for 180 days without legal basis or customer consent. The watchdog said Aldi’s practice was a serious infringement and represented a data breach. Aldi must also review and change its age verification practices and publish a privacy notice on data processing.