TECHPUMP SOLUTIONS S.L.

€525,000

Non-compliance with general data processing principles

Dato for beslutning

31. oktober 2022

Myndighet

Spanish Data Protection Authority (aepd)

ES

Sektor

Media, Telecoms and Broadcasting

Land

ES

Lov og rett

GDPR

Status

FINAL

Beskrivelse

The Spanish DPA has fined Techpump Solutions S.L. EUR 525,000. Techpump operates several websites with adult content. The DPA found several violations of data protection law during its investigation. Firstly, the DPA found that, contrary to the specified information in the privacy policy, Techpump shared users' personal data with companies belonging to the same group. In addition, the DPA found that Techpump had not specified a retention period for users' personal data and kept it indefinitely until users requested to withdraw their consent. Techpump also processed users' personal data without first obtaining their consent. Further, the DPA found that Techpump did not have sufficient parental controls to prevent minors under the age of 14 from accessing its content. In addition, Techpump's privacy policy was only available in English, rather than Spanish, and the information was not clearly understandable. Techpump also required that individuals who wished to exercise their data subject rights submit their ID card information in order to verify their identity. The DPA considered this to be an unacceptable impediment to the exercise of data subject rights. Finally, Techpump also collected various data such as IP addresses and WIFI data without having defined a processing purpose for it.

Juridiske henvisninger

Art. 5 (1)Art. 6 (1)Art. 8Art. 12 (1)Art. 13Art. 25Art. 30 (1)Art. 22 (2)

Problemer og overtredelser

Non-compliance with general data processing principles

Hold deg oppdatert om håndheving av personvern

Vi respekterer personvernet ditt. Én e-post per måned, ingen spam, avmelding når som helst.