MAF.COM ESQUI CLUB

€10,000

Insufficient legal basis for data processing

Data della decisione

11 ottobre 2021

Autorità

Spanish Data Protection Authority (aepd)

ES

Settore

Industry and Commerce

Paese

ES

Legge

GDPR

Stato

FINAL

Descrizione

The Spanish DPA (AEPD) has imposed a fine of EUR 10,000 on MAF.COM ESQUI CLUB. The mother of an underage girl who had attended ski lessons with the controller filed a complaint with the DPA against the latter. The controller had published videos of the mother's daughter on its website and social media channels without her consent. The images were only disseminated with the consent of the father, who enrolled the girl in the ski course. The girl's parents were divorced at the time of the incident. The DPA found that the controller had failed to obtain consent from both parents and thus processed the images without a valid legal basis.

Citazioni legali

Art. 7

Problemi e violazioni

Insufficient legal basis for data processing

Rimanete aggiornati sull'applicazione della privacy

Rispettiamo la vostra privacy. Un'email al mese, niente spam, cancellazione in qualsiasi momento.