INDECEMI, S.L.
€3,000
Non-compliance with general data processing principles
Decision Date
December 3, 2022
Authority
Spanish Data Protection Authority (aepd)
ES
Sector
Industry and Commerce
Country
ES
Law
GDPRStatus
FINALDescription
The Spanish DPA has imposed a fine of EUR 3,000 on INDECEMI, S.L.. A person had filed a complaint with the DPA against the controller after receiving an email from the controller containing personal data (first name, last name, address, telephone number, etc.) of another person in the context of a complaint. The DPA considered this to be a violation of the principle of integrity and confidentiality.
Legal Citations
Art. 5 (1)
Issues & Violations
Non-compliance with general data processing principles