Date: November 15, 2024
The Supreme Administrative Court (NSA) has upheld the decision of the Personal Data Protection Office (UODO) to fine ClickQuickNow for GDPR violations. Issued on November 12, 2024, the ruling dismissed the company’s cassation complaint and confirmed the obligation to pay PLN 201,559.50.
In its decision from October 16, 2019, UODO highlighted procedural barriers imposed by ClickQuickNow, which made withdrawing consent unnecessarily complicated. The court emphasized that withdrawing consent must be as simple as giving it. Instead of simplifying the process, the company required users to provide reasons for withdrawal, misleading them and interrupting the process.
This issue affected a significant number of individuals. The company’s database contained personal data of over 2.1 million people, including non-clients. Additionally, ClickQuickNow unlawfully processed data of individuals who had requested its deletion, violating their rights under GDPR.
NSA confirmed that the fine imposed by UODO was appropriate and necessary to address these violations.
Source: President of the Personal Data Protection Office (PUODO)