Basketball Federation of Castilla and Leon
€5,000
Insufficient legal basis for data processing
Date de décision
28 août 2020
Autorité
Spanish Data Protection Authority (aepd)
ES
Secteur
Individuals and Private Associations
Pays
ES
Droit
GDPRStatut
FINALDescription
The Basketball Association transmitted personal data to third parties, which were subsequently published on the Internet without consent of the data subjects. In addition, the data protection authority found that the Basketball Federation also disclosed personal data to a newspaper, violating - in addition - the principle of integrity and confidentiality (Art. 5 (1) f) GDPR).
Citations légales
Art. 5Art. 6
Questions et violations
Insufficient legal basis for data processing