ESTUDIO ALCAZAR DEL GENIL 2022, S.L.
€12,000
Insufficient legal basis for data processing
Decision Date
March 28, 2025
Authority
Spanish Data Protection Authority (aepd)
ES
Sector
Real Estate
Country
ES
Law
GDPRStatus
FINALDescription
The Spanish DPA imposed a fine on ESTUDIO ALCAZAR DEL GENIL 2022, S.L. The controller collected property data by having its employees visit and photograph the properties, including the name on the mailbox. The controller lacked a sufficient legal basis for the data and failed to inform the data subjects about the data processing. The original fine of EUR 20,000 was reduced to EUR 12,000 due to immediate payment and admission of responsibility by the controller.
Legal Citations
Art. 6 (1)Art. 14
Issues & Violations
Insufficient legal basis for data processing