Vinted Fined 2.3 Million Euros for Data Protection Violations by Lithuanian Authorities

Vinted, a leading online platform for buying and selling second-hand clothes, has been fined 2.3 million euros by the Lithuanian data protection authority (DPA) following complaints filed in France. The CNIL, the French privacy watchdog, announced this decision after receiving numerous complaints from French users against the Lithuania-based company in 2020.

The main concerns raised by the complainants were difficulties experienced in exercising their right to have their data erased. The fine was imposed by the DPA on Vinted, which was forwarded with French complaints for investigation.

Vinted has expressed disagreement with the decision, stating that it believes there is no legal basis for the fine and that it sets a new precedent that goes beyond current legislation and industry practices. The company plans to appeal the decision and reassure its members that the issues highlighted by the DPA do not affect the security of their accounts or any misuse of personal data. Vinted emphasizes its commitment to privacy protection and GDPR compliance and has invested significantly in data protection measures.

Among the violations noted by CNIL were that Vinted did not process requests for deletion of users’ data in a fair and transparent manner. The company also implemented a “stealth ban” system that infringes on users’ rights excessively. Additionally, Vinted failed to provide evidence that it properly responded to requests for accessing customers’ personal data. Vinted has pledged to work with authorities in Poland, the Netherlands, and Germany to address these issues.

Vinted was founded in 2008 and claims over 100 million members globally, with more than 2,000 employees primarily based in Lithuania.

In conclusion, while Vinted has expressed disagreement with the decision made by Lithuanian authorities, it is crucial for businesses operating online to ensure they comply with relevant data protection laws and regulations to avoid potential legal issues or reputational damage.