CAMERDATA, S.A.
€260,000
Insufficient legal basis for data processing
Datum för beslut
15 april 2025
Myndighet
Spanish Data Protection Authority (aepd)
ES
Sektor
Media, Telecoms and Broadcasting
Land
ES
Lag
GDPRStatus
FINALBeskrivning
The Spanish DPA has imposed a fine of EUR 260,000 on CAMERDATA, S.A. The controller operates a database in which it collects data on individual entrepreneurs from the Spanish Chamber of Commerce, Industry, Services and Navigation, with the purpose of selling this to third parties. The DPA found that there was no sufficient legal basis for the processing carried out by the controller. The controller also failed to inform the data subjects about the processing.
Rättsliga hänvisningar
Art. 6 (1)Art. 14
Frågor och överträdelser
Insufficient legal basis for data processing