CAMERDATA, S.A.
€260,000
Insufficient legal basis for data processing
Date de décision
15 avril 2025
Autorité
Spanish Data Protection Authority (aepd)
ES
Secteur
Media, Telecoms and Broadcasting
Pays
ES
Droit
GDPRStatut
FINALDescription
The Spanish DPA has imposed a fine of EUR 260,000 on CAMERDATA, S.A. The controller operates a database in which it collects data on individual entrepreneurs from the Spanish Chamber of Commerce, Industry, Services and Navigation, with the purpose of selling this to third parties. The DPA found that there was no sufficient legal basis for the processing carried out by the controller. The controller also failed to inform the data subjects about the processing.
Citations légales
Art. 6 (1)Art. 14
Questions et violations
Insufficient legal basis for data processing