Caixabank S.A.
€50,000
Insufficient legal basis for data processing
Date de décision
8 juillet 2021
Autorité
Spanish Data Protection Authority (aepd)
ES
Secteur
Finance, Insurance and Consulting
Pays
ES
Droit
GDPRStatut
FINALDescription
The Spanish DPA (AEPD) has imposed a fine of EUR 50,000 on Caixabank S.A.. A data subject had filed a complaint with the DPA because he had received commercial advertising from the controller, although he had objected to the processing of his data for advertising purposes and the controller had replied that it would comply with this request.
Citations légales
Art. 6 (1)
Questions et violations
Insufficient legal basis for data processing