Municipal employee: Insufficient legal basis for data processing

In the context of a municipal election in 2018, the data controller had sent election advertisements to a group of employees of the same municipal administration, unlawfully using a list of contact data to which he had no access.

GDPR Articles: Art. 5 GDPR, Art. 6 GDPR
Industry: Public Sector and Education