NANDIVALE, S.L
€10,000
Insufficient legal basis for data processing
Decision Date
July 17, 2023
Authority
Spanish Data Protection Authority (aepd)
ES
Sector
Industry and Commerce
Country
ES
Law
GDPRStatus
FINALDescription
The Spanish DPA has imposed a fine of EUR 10,000 on NANDIVALE, S.L.. The controller had uploaded images on social media of a party at its premises showing minors. The mother of a child had filed a complaint due to the fact that she had not given her consent to the publication of the images. The DPA therefore found that the controller had unlawfully processed the images in the absence of a valid legal basis.
Legal Citations
Art. 6 (1)
Issues & Violations
Insufficient legal basis for data processing