Amazon Road Transport Spain S.L.

€2,000,000

Insufficient legal basis for data processing

Dato for beslutning

11. februar 2022

Myndighet

Spanish Data Protection Authority (aepd)

ES

Sektor

Transportation and Energy

Land

ES

Lov og rett

GDPR

Status

FINAL

Beskrivelse

The Spanish DPA (AEPD) has fined Amazon Road Transport Spain S.L. EUR 2,000,000. The AEPD had received a complaint from a trade union against the company. Amazon Road required certificates confirming the absence of criminal records when hiring drivers. Amazon Road believed that these certifications were not subject to Art. 10 GDPR. However, contrary to Amazon Road's interpretation, the AEPD determined that these data do fall under Art. 10 GDPR. During its investigation, the AEPD concluded that the processing of these data consequently did not comply with the requirements of Art. 10 GDPR. For this reason, the DPA came to the conclusion that Amazon Road had processed the data on the absence of criminal records without a valid legal basis.

Juridiske henvisninger

Art. 6 (1)Art. 10Art. 10

Problemer og overtredelser

Insufficient legal basis for data processing

Hold deg oppdatert om håndheving av personvern

Vi respekterer personvernet ditt. Én e-post per måned, ingen spam, avmelding når som helst.