Enforcement · Spanish Data Protection Authority (aepd) EN LLM context A cited markdown file you can paste into your AI assistant (ChatGPT, Claude, a RAG or project knowledge base) to ground it in this document. Contains: this document’s text, its sections with their topics, and the full text of every law provision it applies. Everything links back to its source on overview.legal — legal information, not advice.
EDP Comercializadora, S.A.U.: Insufficient legal basis for data processing
How it connects
Related across sources
Case Law Council of State upholds €600,000 DPA fine against Enschede for Wi-Fi tracking Case Law TSJ PV: Accidental Teams recordings after meetings ended cannot justify trust-based Case Law Spanish court reviews DPA decision on KFC Spain website privacy information and DPO Case Law CJEU - C-61/19 - Orange Romania Case Law FTT: NMC should have neither confirmed nor denied holding struck-off nurse's personal data Case Law Audiencia Nacional upholds €2M AEPD fine against Amazon Flex for criminal-record checks
Full text
The company processed personal data in connection with a gas contract without the consent of the applicant. The decision finds that the applicant received an invoice for a gas contract which he did not sign and that EDP Comercializadora claims that the applicant is party to a contract with another energy company which has a supply contract with EDP Comercializadora and that the processing of data is therefore justified. The AEPD stated that EDP Comercializadora had to prove that the plaintiff had agreed to a contract with a second entity and not only with its direct energy supplier.
Industry: Transportation and Energy
Original document at the source www.aepd.es