FACTOR ENERGÍA, S.A.
€24,000
Insufficient legal basis for data processing
Decision Date
2 de janeiro de 2023
Authority
Spanish Data Protection Authority (aepd)
ES
Sector
Transportation and Energy
Country
ES
Law
GDPRStatus
FINALDescription
The Spanish DPA has imposed a fine on a FACTOR ENERGÍA, S.A.. A data subject had filed a complaint with the DPA because they had received advertising messages from the controller even though no contractual relationship existed between them. According to the DPA, the controller had processed the data unlawfully in the absence of a valid legal basis. The original fine of EUR 40,000 was reduced to EUR 24,000 due to voluntary payment and admission of responsibility.
Legal Citations
Art. 6 (1)
Issues & Violations
Insufficient legal basis for data processing