# SEAN SERIOS S.L.: Insufficient legal basis for data processing

- Type: Enforcement
- Source: Spanish Data Protection Authority (aepd)
- Date: 2022-10-14
- Original: https://www.enforcementtracker.com/ETid-1441
- Canonical: https://overview.legal/posts/47556
- Topics: Controllers, Personal Data, Education, IP Address, Processing Agreement, Public Authority, Processing, Data Controller, Public Sector, Supervisory Authorities

## Summary

The Spanish DPA has imposed a fine of EUR 12,000 on SEAN SERIOS S.L. The controller had published the results of a selection procedure on a website. This included, among other things, personal data of the participants, such as surname, first name and score in the selection process. In the course of its investigation, the DPA found that the controller did not have a sufficient legal basis for publishing the data.

## Full text

The Spanish DPA has imposed a fine of EUR 12,000 on SEAN SERIOS S.L. The controller had published the results of a selection procedure on a website. This included, among other things, personal data of the participants, such as surname, first name and score in the selection process. In the course of its investigation, the DPA found that the controller did not have a sufficient legal basis for publishing the data.

GDPR Articles: Art. 6 (1) GDPR
Industry: Public Sector and Education

---
Generated by overview.legal · https://overview.legal/posts/47556 · 2026-08-22