Enforcement · Spanish Data Protection Authority (aepd) EN LLM context A cited markdown file you can paste into your AI assistant (ChatGPT, Claude, a RAG or project knowledge base) to ground it in this document. Contains: this document’s text, its sections with their topics, and the full text of every law provision it applies. Everything links back to its source on overview.legal — legal information, not advice.

Patio Ancestral S.L.: Insufficient legal basis for data processing

€3,000 Fine
Patio Ancestral S.L.
SPAIN
Art. 6 GDPR
Controllers Personal Data Processing Agreement Processing Liability Data Controller Supervisory Authorities
Feb 8, 2021 Source

How it connects

Related across sources

Guidance Opinion 07/2025 regarding the European Commission Draft Implementing Decision pursuant to Regulation (EU) 2016/679 on the adequate protection of personal data by the European Patent Organisation EDPB Case Law Deutsche Wohnen SE v Staatsanwaltschaft Berlin CJEU Guidance Guidelines 07/2022 on certification as a tool for transfers EDPB News Danish SA Declares Use of Google Analytics Unlawful Without Supplementary Measures Datatilsynet Guidance Guidelines 04/2021 on Codes of Conduct as tools for transfers EDPB Literature General Data Protection Regulation (GDPR) ambiguity, national diversity and data protection officer certification: Implementing Art. 39(1) GDPR in France, Italy, Luxembourg and Spain Journal of Data Protection Privacy

Full text

The Spanish DPA (AEPD) imposed a fine of EUR 5,000 on Patio Ancestral S.L.. The complainant worked for a construction company and had carried out some renovation work for the controller. During these works, damage had been caused to the controller's properties. The controller had then sent a letter with claims for damages not only to the complainant but also to the complainant's father, who had previously been employed by the same construction company. However, the father was an uninvolved third party in this case. The Spanish DPA found that the processing of the father's personal data for this reason had taken place without a legal basis. The original fine was reduced to EUR 3,000 due to immediate payment and admission of responsibility.

Industry: Industry and Commerce

Original document at the source www.aepd.es

Similar Content