LVMH IBERIA, S.L.
€42,000
Insufficient legal basis for data processing
Decision Date
May 30, 2025
Authority
Spanish Data Protection Authority (aepd)
ES
Sector
Employment
Country
ES
Law
GDPRStatus
FINALDescription
The Spanish DPA imposed a fine of EUR 42,000 on LVMH IBERIA, S.L. The controller added the private phone number of an employee to an workrelated WhatApp group without a legal basis. The original fine of EUR 70,000 was reduced to EUR 42,000 due to immediate payment and admission of responsibility by the controller.
Legal Citations
Art. 6 (1)
Issues & Violations
Insufficient legal basis for data processing