Alterna Operador Integral S.L.

€50,000

Insufficient legal basis for data processing

Date de décision

21 janvier 2021

Autorité

Spanish Data Protection Authority (aepd)

ES

Secteur

Transportation and Energy

Pays

ES

Droit

GDPR

Statut

FINAL

Description

The Spanish DPA (AEPD) imposed a fine of EUR 50,000 on Alterna Operador Integral S.L.. A switch of the electricity supplier had taken place without the consent of the data subject. However, the personal data of the data subject were incorporated into the information systems of the controller (the new electricity supplier) without the controller having verified that a valid contract had been concluded. The processing of the data subjects' personal data thus took place without a legal basis.

Citations légales

Art. 6 (1)

Questions et violations

Insufficient legal basis for data processing

Restez informé sur l'application de la législation en matière de protection de la vie privée

Nous respectons votre vie privée. Un courriel par mois, pas de spam, désabonnement à tout moment.