Basketball Federation of Castilla and Leon
€5,000
Insufficient legal basis for data processing
Beslissingsdatum
28 augustus 2020
Autoriteit
Spanish Data Protection Authority (aepd)
ES
Sector
Individuals and Private Associations
Land
ES
Wet
GDPRStatus
FINALBeschrijving
The Basketball Association transmitted personal data to third parties, which were subsequently published on the Internet without consent of the data subjects. In addition, the data protection authority found that the Basketball Federation also disclosed personal data to a newspaper, violating - in addition - the principle of integrity and confidentiality (Art. 5 (1) f) GDPR).
Juridische citaten
Art. 5Art. 6
Problemen en overtredingen
Insufficient legal basis for data processing