Banco Bilbao Vizcaya Argentaria, SA
€24,000
Insufficient legal basis for data processing
Data da decisão
20 de julho de 2020
Autoridade
Spanish Data Protection Authority (aepd)
ES
Setor
Finance, Insurance and Consulting
País
ES
Lei
GDPRStatus
FINALDescrição
BBVA had no legitimate basis for processing the data of the data subject and had therefore infringed Article 6(1) of the GDPR, since the company processed solvency and credit information files without a prior contractual relationship with the data subject.
Citações legais
Art. 5Art. 6
Problemas e violações
Insufficient legal basis for data processing