Unknown
€9,000
Insufficient legal basis for data processing
Dátum rozhodnutia
2. marca 2021
Úrad
Spanish Data Protection Authority (aepd)
ES
Sektor
Not assigned
Krajina
CZ
Právo
GDPRStav
FINALPopis
The Spanish DPA (AEPD) imposed a fine of EUR 9,000 on a website operator. The controller had published photos of the data subject on its website without the consent of the data subject. Also, the website in question did not contain a privacy statement. The fine is composed as follows: EUR 5,000 for a violation of Art. 6 GDPR and EUR 4,000 for a violation of Art. 13 GDPR.
Právne citácie
Art. 6Art. 13
Problémy a porušenia
Insufficient legal basis for data processing