General Confederation of Labour ('CGT')
€3,000
Insufficient legal basis for data processing
Decision Date
November 13, 2019
Authority
Spanish Data Protection Authority (aepd)
ES
Sector
Industry and Commerce
Country
ES
Law
GDPRStatus
FINALDescription
The CGT, with the aim of convening a meeting, e-mailed personal data of the complainant, including her home address, family relationship, pregnancy status and the date of an ongoing verbal abuse and harassment case, to 400 union members without her consent.
Legal Citations
Art. 6
Issues & Violations
Insufficient legal basis for data processing