PRA Iberia S.L.
Insufficient legal basis for data processing
Fecha de la decisión
27 de julio de 2021
Autoridad
Spanish Data Protection Authority (aepd)
ES
Sector
Finance, Insurance and Consulting
País
ES
Ley
GDPREstado
FINALDescripción
The Spanish DPA (AEPD) has fined PRA Iberia S.L. EUR 60,000. A data subject had filed a complaint against the controller with the AEPD. The complaint was based on the fact that the controller asserted a claim arising from a contract that the data subject had never concluded and of which he had no knowledge. The AEPD points out that the data subject had attempted to exercise his right to information, but received no response from the controller, that instead continued to add interest to the data subject's alleged debt.