# UNIÓN FINANCIERA ASTURIANA S.A. E.F.C.: Insufficient legal basis for data processing

- Type: Enforcement
- Source: Spanish Data Protection Authority (aepd)
- Date: 2021-11-24
- Original: https://www.enforcementtracker.com/ETid-918
- Canonical: https://overview.legal/posts/47033
- Topics: Controllers, Insurance, Personal Data, Processing Agreement, Processing, Supervisory Authorities, Data Controller

## Summary

The Spanish DPA (AEPD) fined UNIÓN FINANCIERA ASTURIANA S.A. E.F.C.. The controller had carried out a credit check on the data subject without any contractual basis for doing so. The original fine of EUR 15,000 was reduced to EUR 9,000 due to voluntary payment and admission of guilt.

## Full text

The Spanish DPA (AEPD) fined UNIÓN FINANCIERA ASTURIANA S.A. E.F.C.. The controller had carried out a credit check on the data subject without any contractual basis for doing so. The original fine of EUR 15,000 was reduced to EUR 9,000 due to voluntary payment and admission of guilt.

GDPR Articles: Art. 6 (1) GDPR
Industry: Finance, Insurance and Consulting

---
Generated by overview.legal · https://overview.legal/posts/47033 · 2026-08-22