# Club Náutico el Estacio: Insufficient technical and organisational measures to ensure information security

- Type: Enforcement
- Source: Spanish Data Protection Authority (aepd)
- Date: 2021-08-02
- Original: https://www.enforcementtracker.com/ETid-789
- Canonical: https://overview.legal/posts/46904
- Topics: Inspection Access Rights and Cooperation Obligations, Personal Data, Processing Agreement, Controllers, Security, Supervisory Authorities, Data Controller, Law Enforcement

## Summary

The Spanish DPA (AEPD) has imposed a fine of EUR 3,000 on Club Náutico el Estacio. A data subject filed a complaint against the controller with the AEPD. The complaint is based on the fact that the controller has published the announcement and the record of the club's ordinary meeting on its website, disclosing personal data without access restrictions.

## Full text

The Spanish DPA (AEPD) has imposed a fine of EUR 3,000 on Club Náutico el Estacio. A data subject filed a complaint against the controller with the AEPD. The complaint is based on the fact that the controller has published the announcement and the record of the club's ordinary meeting on its website, disclosing personal data without access restrictions.

GDPR Articles: Art. 32 GDPR
Industry: Individuals and Private Associations

---
Generated by overview.legal · https://overview.legal/posts/46904 · 2026-08-22