Enforcement
EN FACTOR ENERGÍA, S.A.: Insufficient legal basis for data processing
€24,000 fine - Spanish Data Protection Authority (aepd)
Content
The Spanish DPA has imposed a fine on a FACTOR ENERGÍA, S.A.. A data subject had filed a complaint with the DPA because they had received advertising messages from the controller even though no contractual relationship existed between them. According to the DPA, the controller had processed the data unlawfully in the absence of a valid legal basis. The original fine of EUR 40,000 was reduced to EUR 24,000 due to voluntary payment and admission of responsibility.
GDPR Articles: Art. 6 (1) GDPR
Industry: Transportation and Energy