# ACKERMANN & SCHWARTZ ATTORNEYS AT LAW SLP: Insufficient legal basis for data processing

- Type: Enforcement
- Source: Spanish Data Protection Authority (aepd)
- Date: 2022-10-26
- Original: https://www.enforcementtracker.com/ETid-1471
- Canonical: https://overview.legal/posts/47586
- Topics: Personal Data, Controllers, Insurance, Processing Agreement, Consent, Processing, Supervisory Authorities, Data Controller

## Summary

The Spanish DPA has imposed a fine of EUR 10,000 on ACKERMANN & SCHWARTZ ATTORNEYS AT LAW SLP. The law firm had collected personal data from website users without obtaining their consent. In addition, the DPA found that the privacy policy on the website did not contain sufficient information. For example, information on the controller's contact details and information on exercising data subjects' rights were missing.

## Full text

The Spanish DPA has imposed a fine of EUR 10,000 on ACKERMANN & SCHWARTZ ATTORNEYS AT LAW SLP. The law firm had collected personal data from website users without obtaining their consent. In addition, the DPA found that the privacy policy on the website did not contain sufficient information. For example, information on the controller's contact details and information on exercising data subjects' rights were missing.

GDPR Articles: Art. 6 (1) GDPR, Art. 13 GDPR
Industry: Finance, Insurance and Consulting

---
Generated by overview.legal · https://overview.legal/posts/47586 · 2026-08-22