# Cyrana España General S.L.: Insufficient legal basis for data processing

- Type: Enforcement
- Source: Spanish Data Protection Authority (aepd)
- Date: 2022-01-31
- Original: https://www.enforcementtracker.com/ETid-1020
- Canonical: https://overview.legal/posts/47135
- Topics: Controllers, IP Address, Processing Agreement, Personal Data, Processing, Supervisory Authorities, Data Controller

## Summary

The Spanish DPA (AEPD) has fined Cyrana España General S.L. EUR 5,000. The controller had sent an invoice to the data subject although no contractual relationship existed.

## Full text

The Spanish DPA (AEPD) has fined Cyrana España General S.L. EUR 5,000. The controller had sent an invoice to the data subject although no contractual relationship existed.

GDPR Articles: Art. 6 (1) GDPR
Industry: Industry and Commerce

---
Generated by overview.legal · https://overview.legal/posts/47135 · 2026-08-22