Banco Bilbao Vizcaya Argentaria, SA

€24,000

Insufficient legal basis for data processing

Datum odločitve

20. julij 2020

Organ

Spanish Data Protection Authority (aepd)

ES

Sektor

Finance, Insurance and Consulting

Država

ES

Zakon

GDPR

Status

FINAL

Opis

BBVA had no legitimate basis for processing the data of the data subject and had therefore infringed Article 6(1) of the GDPR, since the company processed solvency and credit information files without a prior contractual relationship with the data subject.

Pravne navedbe

Art. 5Art. 6

Vprašanja in kršitve

Insufficient legal basis for data processing

Spremljajte novice o uveljavljanju zasebnosti

Spoštujemo vašo zasebnost. Eno e-poštno sporočilo na mesec, brez neželene pošte, odjava kadar koli.