ATRIUM LEX SFC
€100,000
Insufficient fulfilment of information obligations
วันที่ตัดสินใจ
18 ธันวาคม 2567
อำนาจ
Spanish Data Protection Authority (aepd)
ES
ภาคส่วน
Real Estate
ประเทศ
ES
กฎหมาย
GDPRสถานะ
FINALคำอธิบาย
The Spanish DPA has imposed a fine of EUR 100,000 on the real estate management company ATRIUM LEX SFC. An investor had filed a complaint with the DPA because the controller had requested a copy of the investor's ID card to enable them to receive information about a project. The DPA found that the controller had not provided sufficient information about this data processing and that the sending of copies of ID cards by email was not sufficiently secure. The DPA assessed this as a violation of Art. 13 GDPR and Art. 32 (1) GDPR.
การอ้างอิงทางกฎหมาย
Art. 13Art. 32 (1)
ปัญหาและการละเมิด
Insufficient fulfilment of information obligations