# Automoción: Insufficient legal basis for data processing

- Type: Enforcement
- Source: Spanish Data Protection Authority (aepd)
- Date: 2020-02-03
- Original: https://www.enforcementtracker.com/ETid-200
- Canonical: https://overview.legal/posts/46315
- Topics: Personal Data, Processing, Supervisory Authorities

## Summary

An employee created a fake profile about a female colleague on an erotic portal, which contained, among other things, her contact details, a photo of her and information about her sexual nature. Based on the profile, the data subject received several phone calls from people who wanted to contact her regarding the information provided on the website. As the private person was found to have a personality disorder, the fine was reduced from initial EUR 1000 to EUR 800.

## Full text

An employee created a fake profile about a female colleague on an erotic portal, which contained, among other things, her contact details, a photo of her and information about her sexual nature. Based on the profile, the data subject received several phone calls from people who wanted to contact her regarding the information provided on the website. As the private person was found to have a personality disorder, the fine was reduced from initial EUR 1000 to EUR 800.

GDPR Articles: Art. 5 GDPR, Art. 6 GDPR
Industry: Industry and Commerce

---
Generated by overview.legal · https://overview.legal/posts/46315 · 2026-08-22