Banco Bilbao Vizcaya Argentaria, SA
€24,000
Insufficient legal basis for data processing
Дата на решението
20 юли 2020 г.
Орган
Spanish Data Protection Authority (aepd)
ES
Сектор
Finance, Insurance and Consulting
Държава
ES
Право
GDPRСтатус
FINALОписание
BBVA had no legitimate basis for processing the data of the data subject and had therefore infringed Article 6(1) of the GDPR, since the company processed solvency and credit information files without a prior contractual relationship with the data subject.
Правни цитати
Art. 5Art. 6
Въпроси и нарушения
Insufficient legal basis for data processing