Caixabank S.A.
€50,000
Insufficient legal basis for data processing
Decision Date
8 de julho de 2021
Authority
Spanish Data Protection Authority (aepd)
ES
Sector
Finance, Insurance and Consulting
Country
ES
Law
GDPRStatus
FINALDescription
The Spanish DPA (AEPD) has imposed a fine of EUR 50,000 on Caixabank S.A.. A data subject had filed a complaint with the DPA because he had received commercial advertising from the controller, although he had objected to the processing of his data for advertising purposes and the controller had replied that it would comply with this request.
Legal Citations
Art. 6 (1)
Issues & Violations
Insufficient legal basis for data processing