Iberdrola Clientes
€100,000
Insufficient fulfilment of data subjects rights
결정 날짜
2021년 2월 3일
권한
Spanish Data Protection Authority (aepd)
ES
섹터
Transportation and Energy
국가
ES
법률
GDPR상태
FINAL설명
The Spanish DPA (AEPD) imposed a fine of EUR 100,000 on Iberdrola Clientes, SAU. The data subject had terminated an existing contract with the controller due to a move and therefore requested the deletion of his/her data. This request was rejected by the controller with reference to outstanding invoices. It turned out that the controller had sent the bills to the old address of the data subject. Even after the data subject informed the controller of the change of address, new notices regarding the deletion request and invoices were sent to the old address.
법적 인용
Art. 5 (1)Art. 17
문제 및 위반 사항
Insufficient fulfilment of data subjects rights