Carrefour Banque was fined EUR 800,000 by the French DPA (CNIL) for violating its obligations to fairly process data (under Article 5 (1) GDPR). Carrefour Banque officially claimed that, when a client subscribed to the Pass card (which is attached to the loyalty account) and also wanted to participate in the Carrefour loyalty program, the client would have to check a box agreeing to Carrefour Banque forwarding his or her surname, first name, and email address to “Carrefour fidelite”. In this sense, Carrefour Banque expressly states that no other information other than the specific one would be transmitted. However, CNIL discovered that other data was transmitted, including postal address, number of children, and telephone number.
carrefour banque was   by the french dpa cnil for violating its obligations to fairly process data under cle   carrefour banque officially claimed that when a client subscribed to the pass card which is attached to the loyalty account and also wanted to participate in the carrefour loyalty program the client would have to check a box agreeing to carrefour banque forwarding his or her surname first name and email address to “carrefour fidelite” in this sense carrefour banque expressly states that no other information other than the specific one would be transmitted however cnil discovered that other data was transmitted including postal address number of children and telephone number
carrefour banque      french dpa cnil  violate  obligations  fairly process data  cle   carrefour banque officially claim    client subscribe   pass card   attach   loyalty account  also want  participate   carrefour loyalty program  client would   check  box agree  carrefour banque forward    surname first name  email address  “carrefour fidelite”   sense carrefour banque expressly state    information    specific one would  transmit however cnil discover   data  transmit include postal address number  children  telephone number