Gesthotel Activos Balagares
€15,000
Non-compliance with general data processing principles
Decision Date
March 9, 2020
Authority
Spanish Data Protection Authority (aepd)
ES
Sector
Employment
Country
ES
Law
GDPRStatus
FINALDescription
The data subject argued that he had sent a private letter to the hotel management and union delegates containing information about an episode of harassment he had suffered, describing a specific medical condition. In violation of the principle of integrity and confidentiality, the hotel management and union delegates subsequently read the contents of this letter in a meeting with other employees.
Legal Citations
Art. 5 (1)
Issues & Violations
Non-compliance with general data processing principles