Following numerous complaints received about a clothing sales service operated by the Lithuanian company Vinted UAB, the supervisory authorities of France, Lithuania and Poland have engaged in an investigation into compliance with the GDPR. A working group has been set up for this purpose, with the support of the European Data Protection Board. The authorities will verify the legality of the obligation to send a scan of an ID in order to unblock funds received from sales on a user’s account, as well as the procedure and criteria for blocking the account and the data retention periods. As the controller is based in Lithuania, the leading supervisory authority is the Lithuanian supervisory authority, the State Data Protection Inspectorate. The Vinted platform is also available in several other European countries, hence the decision to set up a working group comprising representatives of several authorities.
LATEST POSTS