Working Capital Management España, S.L.
Insufficient legal basis for data processing
Data della decisione
28 aprile 2022
Autorità
Spanish Data Protection Authority (aepd)
ES
Settore
Finance, Insurance and Consulting
Paese
ES
Legge
GDPRStato
FINALDescrizione
The Spanish DPA (AEPD) has imposed a fine of EUR 40,000 on the credit information agency Working Capital Management España, S.L.. A data subject had filed a complaint with the AEPD against the company. Fraudulent third parties had taken out a loan with NBQ Technology, S.A.U. in the name of the data subject without the data subject actually entering into a contract. After the data subject subsequently did not make payments, NBQ disclosed the data subject's information to Working Capital Management. The AEPD determined that Working Capital Management, has processed the data subjects data illegally since the personal data was entered into the company's information systems without checking whether the data subject had given their consent to the processing of their personal data.