# Avata Hispania, S.L.: Insufficient legal basis for data processing

- Type: Enforcement
- Source: Spanish Data Protection Authority (aepd)
- Date: 2020-10-03
- Original: https://www.enforcementtracker.com/ETid-423
- Canonical: https://overview.legal/posts/46538
- Topics: Controllers, Processors, Personal Data, IP Address, Processing, Data Controller, Data Processor, Supervisory Authorities

## Summary

Infringement of Art. 28 (3) g) GDPR, since personal data were further processed after the controller had terminated the contractual relationship with the processor.

## Full text

Infringement of Art. 28 (3) g) GDPR, since personal data were further processed after the controller had terminated the contractual relationship with the processor.

GDPR Articles: Art. 5 GDPR, Art. 6 GDPR, Art. 28 (3) g) GDPR
Industry: Industry and Commerce

---
Generated by overview.legal · https://overview.legal/posts/46538 · 2026-08-22