Banco Bilbao Vizcaya Argentaria, SA
€24,000
Insufficient legal basis for data processing
Data della decisione
20 luglio 2020
Autorità
Spanish Data Protection Authority (aepd)
ES
Settore
Finance, Insurance and Consulting
Paese
ES
Legge
GDPRStato
FINALDescrizione
BBVA had no legitimate basis for processing the data of the data subject and had therefore infringed Article 6(1) of the GDPR, since the company processed solvency and credit information files without a prior contractual relationship with the data subject.
Citazioni legali
Art. 5Art. 6
Problemi e violazioni
Insufficient legal basis for data processing