Skip to content

Hungary’s privateness choice on direct advertising and marketing asks: how a lot consent is required for direct advertising and marketing via completely different channels?

In choice No. NAIH-2501-10/2022 of 12 September 2022, the Hungarian Information Safety and Freedom of Data Authority (NAIH) imposed a HUF 30 million (EUR 74,500) information safety positive on Magyar Éremkibocsátó Kft.

The positive was imposed after the corporate dealt with contact information of 1000’s of people within the absence of satisfactory prior privateness data, a concretely outlined function, and a sound authorized foundation.

In keeping with the GDPR, the NAIH additionally instructed the corporate to delete contact information used for direct advertising and marketing functions for which it can not get hold of a brand new, applicable consent, or doesn’t have one other legitimate authorized foundation for processing them for non-direct advertising and marketing functions ( eg contractual contact).

The choice is very vital as a result of that is the primary time the NAIH has addressed what number of consents are required for a corporation to carry out direct advertising and marketing actions via completely different channels. Following the NAIH’s findings, firms engaged in direct advertising and marketing actions should instantly evaluation their privateness consent varieties, privateness notices and phone scripts and decide whether or not they meet the authority’s expectations.

The NAIH’s most vital findings relating to the duties of the businesses embody:

  • Separate consent is required for every function and channel. Within the textual content of a privateness consent, receiving direct advertising and marketing “electronically” is just too broad a time period. People should be capable of select in the event that they solely want to consent to direct advertising and marketing in sure channels (eg solely by submit, solely by cellphone or solely by e-mail, or by any mixture of those). This doesn’t preclude the availability of an choice the place consent could be given for all specified functions on the identical time. It ought to, nonetheless, be attainable to provide separate consent just for sure functions. Corporations should evaluation the design of their privateness consents – primarily, the variety of checkboxes and the way in which they’re worded.

  • Separate consent is required for Google and Fb promoting. Direct advertising and marketing despatched by way of different channels (eg focused ads on the Google and Fb promoting methods) additionally require separate consent, and separate data should be supplied on using comparable mass automated promoting methods. Corporations should additionally evaluation the design of their privateness consents and the content material of their privateness notices.

  • Particular data is required on the advertising and marketing methodology. The aim of processing contact information can’t be a versatile objective reminiscent of “receiving extra favorable provides”. Direct advertising and marketing is an umbrella idea, and corporations should point out the precise implementation (eg sending ads on their very own or third-party merchandise on a given channel or particular channels). Corporations should additionally spotlight of their privateness notices any vital circumstances that aren’t customary and people might not moderately anticipate, reminiscent of a international information processor and its clear, concise, simply comprehensible function. Corporations should evaluation the textual content of their privateness consents and the content material of their privateness notices.

  • Corporations should present data on the situation of their privateness discover for the at the moment used communication channel. Within the case of offline communication, it isn’t sufficient to refer solely to the supply of the web privateness discover, as a result of there could also be many people who don’t have web entry or can not discover the knowledge on the web throughout or earlier than ordering by mail or phone. Corporations should evaluation the knowledge they supply on the supply of their privateness discover.


Leave a Reply

Your email address will not be published. Required fields are marked *