EDP España S.A.U.
€75,000
Insufficient legal basis for data processing
Decision Date
January 7, 2020
Authority
Spanish Data Protection Authority (aepd)
ES
Sector
Industry and Commerce
Country
ES
Law
GDPRStatus
FINALDescription
The company processed personal data such as first and last name, tax number, address and mobile phone number without the consent of the data subject
Legal Citations
Art. 6
Issues & Violations
Insufficient legal basis for data processing