Unknown
- Country
- Turkey
- Fine
- Instructed the Data Controller
- Date
- 2018-08-02
- Sector
- Business Sector
- Articles
- Art. 4 of the DPL
Insufficient fulfilment of data subjects rights
A Data Controller has abstained from fulfilling the requests made by inactive customers, demanding from the Data Controller to delete their personal data. The Authority has instructed the Data Controller, by suggesting that it must not process the data of the inactive customers, in breach with the general principles, other than the purpose of storage, since it is obliged to store the data for 10 years. Authority: Turkish Data Protection Authority (KVKK)