CAIXABANK PAYMENTS & CONSUMER EFC, EP, S.A.U.
€200,000
Insufficient legal basis for data processing
Päätöspäivä
13. marraskuuta 2023
Viranomainen
Spanish Data Protection Authority (aepd)
ES
Ala
Finance, Insurance and Consulting
Maa
ES
Laki
GDPRTila
FINALKuvaus
The Spanish DPA has imposed a fine of EUR 200,000 on CAIXABANK PAYMENTS & CONSUMER EFC, EP, S.A.U.. The controller had included the data subject's personal data in a credit reporting register without a sufficient legal basis. The controller justified this with alleged debts that the data subject had with the controller. In fact, however, the parties were still involved in ongoing court proceedings.
Oikeudelliset viittaukset
Art. 6
Asiat ja rikkomukset
Insufficient legal basis for data processing