Private individual
€2,000
Insufficient legal basis for data processing
Ngày ra quyết định
20 tháng 5, 2022
Thẩm quyền
Spanish Data Protection Authority (aepd)
ES
Ngành
Individuals and Private Associations
Quốc gia
ES
Luật
GDPRTrạng thái
FINALMô tả
The Spanish DPA has fined a private individual operating three websites EUR 2,000. During its investigation, the DPA found that all three websites lacked a field for giving consent to the processing of personal data. In addition, the DPA found that the privacy policies on the websites were missing any reference to the identity of the data controller and to the right of data subjects to withdraw their consent to data processing.
Trích dẫn pháp lý
Art. 6 (1)
Vấn đề & Vi phạm
Insufficient legal basis for data processing