Patio Ancestral S.L.

€3,000

Insufficient legal basis for data processing

Ngày ra quyết định

8 tháng 2, 2021

Thẩm quyền

Spanish Data Protection Authority (aepd)

ES

Ngành

Industry and Commerce

Quốc gia

ES

Luật

GDPR

Trạng thái

FINAL

Mô tả

The Spanish DPA (AEPD) imposed a fine of EUR 5,000 on Patio Ancestral S.L.. The complainant worked for a construction company and had carried out some renovation work for the controller. During these works, damage had been caused to the controller's properties. The controller had then sent a letter with claims for damages not only to the complainant but also to the complainant's father, who had previously been employed by the same construction company. However, the father was an uninvolved third party in this case. The Spanish DPA found that the processing of the father's personal data for this reason had taken place without a legal basis. The original fine was reduced to EUR 3,000 due to immediate payment and admission of responsibility.

Trích dẫn pháp lý

Art. 6

Vấn đề & Vi phạm

Insufficient legal basis for data processing

Cập nhật thông tin về việc thực thi quy định bảo vệ dữ liệu cá nhân

Chúng tôi tôn trọng quyền riêng tư của bạn. Chỉ một email mỗi tháng, không spam, có thể hủy đăng ký bất cứ lúc nào.