Enforcement
EN GLP Instalaciones 86, SL: Insufficient legal basis for data processing
€60,000 fine - Spanish Data Protection Authority (aepd)
Content
In order to obtain assistance for the installation of an air conditioning system, the data subject had contacted Naturgy Energy Group S.A. Subsequently, he was contacted by two different companies, one of which was GLP Instalaciones 86, who pretended to be Naturgy employees. Naturgy denied this and claimed that the companies were neither authorized installers nor employees of Naturgy resulting in the processing of personal data of the data subject, including his/her name, surname, telephone number, bank details and e-mail, without a valid legal basis.
GDPR Articles: Art. 5 GDPR, Art. 6 GDPR
Industry: Industry and Commerce