CAMERDATA, S.A.
€260,000
Insufficient legal basis for data processing
Decision Date
April 15, 2025
Authority
Spanish Data Protection Authority (aepd)
ES
Sector
Media, Telecoms and Broadcasting
Country
ES
Law
GDPRStatus
FINALDescription
The Spanish DPA has imposed a fine of EUR 260,000 on CAMERDATA, S.A. The controller operates a database in which it collects data on individual entrepreneurs from the Spanish Chamber of Commerce, Industry, Services and Navigation, with the purpose of selling this to third parties. The DPA found that there was no sufficient legal basis for the processing carried out by the controller. The controller also failed to inform the data subjects about the processing.
Legal Citations
Art. 6 (1)Art. 14
Issues & Violations
Insufficient legal basis for data processing