Store owner
€300
Insufficient fulfilment of information obligations
Decision Date
May 10, 2022
Authority
Spanish Data Protection Authority (aepd)
ES
Sector
Industry and Commerce
Country
ES
Law
GDPRStatus
FINALDescription
The Spanish DPA (AEPD) has imposed a fine of EUR 300 on a store owner. The controller had requested various personal data from customers for appointment bookings. The DPA found that the controller failed to properly inform the data subjects about the processing of the data in accordance with Art. 13 GDPR.
Legal Citations
Art. 13
Issues & Violations
Insufficient fulfilment of information obligations