# FACTOR ENERGÍA,
S.A.: Insufficient legal basis for data processing

- Type: Enforcement
- Source: Spanish Data Protection Authority (aepd)
- Date: 2023-01-02
- Original: https://www.enforcementtracker.com/ETid-1609
- Canonical: https://overview.legal/posts/47724
- Topics: Controllers, IP Address, Processing Agreement, Personal Data, Direct Marketing, Processing, Data Controller, Supervisory Authorities, Law Enforcement

## Summary

The Spanish DPA has imposed a fine on a FACTOR ENERGÍA, S.A.. A data subject had filed a complaint with the DPA because they had received advertising messages from the controller even though no contractual relationship existed between them. According to the DPA, the controller had processed the data unlawfully in the absence of a valid legal basis. The original fine of EUR 40,000 was reduced to EUR 24,000 due to voluntary payment and admission of responsibility.

## Full text

The Spanish DPA has imposed a fine on a FACTOR ENERGÍA, S.A.. A data subject had filed a complaint with the DPA because they had received advertising messages from the controller even though no contractual relationship existed between them. According to the DPA, the controller had processed the data unlawfully in the absence of a valid legal basis. The original fine of EUR 40,000 was reduced to EUR 24,000 due to voluntary payment and admission of responsibility.

GDPR Articles: Art. 6 (1) GDPR
Industry: Transportation and Energy

---
Generated by overview.legal · https://overview.legal/posts/47724 · 2026-08-22