Basketball Federation of Castilla and Leon

€5,000

Insufficient legal basis for data processing

Decision Date

28 de agosto de 2020

Authority

Spanish Data Protection Authority (aepd)

ES

Sector

Individuals and Private Associations

Country

ES

Law

GDPR

Status

FINAL

Description

The Basketball Association transmitted personal data to third parties, which were subsequently published on the Internet without consent of the data subjects. In addition, the data protection authority found that the Basketball Federation also disclosed personal data to a newspaper, violating - in addition - the principle of integrity and confidentiality (Art. 5 (1) f) GDPR).

Legal Citations

Art. 5Art. 6

Issues & Violations

Insufficient legal basis for data processing

Stay Updated on Privacy Enforcement

We respect your privacy. One email per month, no spam, unsubscribe anytime.