Failure to comply with Article 82 of the Data Protection Act

[samiaseo222]

The display of cookies does not comply with the provisions in force. When users connect to carrefour.fr or carrefour-banque.fr, advertising cookies are immediately placed on the user's device without any consent from the user.

Failure to comply with the GDPR provision on limiting the duration of data retention
Carrefour France kept user data for a oman email list period that exceeded that provided by law. The data of millions of users was kept as part of the loyalty program for almost ten years.

Failure to comply with the GDPR provision relating to the obligation to facilitate the exercise of rights by users
Carrefour France required users to provide unjustified proof of identity. The company also failed to meet deadlines for processing users' requests to exercise their rights.

Failure to comply with user rights as provided for by certain provisions of the GDPR and the Postal and Electronic Communications Code
Carrefour France did not respond to some user requests. Requests from those who wish to access their data, requests for data deletion, were not taken into account. Some people continued to receive advertising messages, despite their refusal by explicit request.