Colegio Arenales Carabanchel (School)
€3,000
Insufficient legal basis for data processing
Decision Date
14 de fevereiro de 2020
Authority
Spanish Data Protection Authority (aepd)
ES
Sector
Public Sector and Education
Country
ES
Law
GDPRStatus
FINALDescription
The decision of the data protection authority states that the school transferred pictures (and therefore personal data) to third parties, who published them without legal basis.
Legal Citations
Art. 6
Issues & Violations
Insufficient legal basis for data processing