Colegio Arenales Carabanchel (School)
€3,000
Insufficient legal basis for data processing
Date de décision
14 février 2020
Autorité
Spanish Data Protection Authority (aepd)
ES
Secteur
Public Sector and Education
Pays
ES
Droit
GDPRStatut
FINALDescription
The decision of the data protection authority states that the school transferred pictures (and therefore personal data) to third parties, who published them without legal basis.
Citations légales
Art. 6
Questions et violations
Insufficient legal basis for data processing