Banco Bilbao Vizcaya Argentaria, SA
€24,000
Insufficient legal basis for data processing
Fecha de la decisión
20 de julio de 2020
Autoridad
Spanish Data Protection Authority (aepd)
ES
Sector
Finance, Insurance and Consulting
País
ES
Ley
GDPREstado
FINALDescripción
BBVA had no legitimate basis for processing the data of the data subject and had therefore infringed Article 6(1) of the GDPR, since the company processed solvency and credit information files without a prior contractual relationship with the data subject.
Citas legales
Art. 5Art. 6
Problemas e infracciones
Insufficient legal basis for data processing