Carrefour France and Carrefour Banque, affiliates of the French retail group, the Carrefour Group where fined €3.05 million by the French Data Protection Agency for GDPR violations following complaints from 15 individuals:
“The complainants argued that Carrefour (1) did not comply with their data access or erasure requests; (2) sent them direct marketing communications despite the fact that the complainants had objected to receiving those communications; or (3) in one case, did not allow the complainant to unsubscribe to marketing emails.”