Property Owner Community

€1,200

Non-compliance with general data processing principles

Ημερομηνία απόφασης

21 Ιανουαρίου 2022

Αρχή

Spanish Data Protection Authority (aepd)

ES

Τομέας

Individuals and Private Associations

Χώρα

ES

Νόμος

GDPR

Κατάσταση

FINAL

Περιγραφή

The Spanish DPA (AEPD) has fined a property owners' community EUR 1,200. A property manager had sent a copy of the general meeting minutes to the director of the security company 'CMM Seguridad'. The document the said document contains the names and addresses of residents, a list of defaulters and the accounts with all income and expenses of the community. According to the controller, the purpose of sending the minutes in question to the security company was to inform them about the members of the Board of Directors appointed at the respective ordinary general meeting. Therefore, the controller should have limited to only providing this information or to transmitting the minutes document after it had been duly anonymized. For this reason, the DPA notes that the transmission of the full minutes would not have been necessary. As a result, the controller violated the principle of data minimization.

Νομικές παραπομπές

Art. 5 (1)

Θέματα & Παραβάσεις

Non-compliance with general data processing principles

Μείνετε ενημερωμένοι για την επιβολή του απορρήτου

Σεβόμαστε την ιδιωτικότητά σας. Ένα email ανά μήνα, χωρίς spam, διαγραφή ανά πάσα στιγμή.