Unknown
€1,000
Insufficient legal basis for data processing
Päätöspäivä
1. heinäkuuta 2021
Viranomainen
Spanish Data Protection Authority (aepd)
ES
Ala
Not assigned
Maa
CZ
Laki
GDPRTila
FINALKuvaus
The Spanish DPA (AEPD) has imposed a fine of EUR 1,000 on a company. The controller had used the personal data of a third party in order to obtain a microcredit. The DPA states that the controller lacked a legal basis for the processing and thus violated Art. 6 (1) GDPR.
Oikeudelliset viittaukset
Art. 6 (1)
Asiat ja rikkomukset
Insufficient legal basis for data processing