# ALBERO FORTE COMPOSITE, S.L.: Insufficient technical and organisational measures to ensure information security

- Type: Enforcement
- Source: Spanish Data Protection Authority (aepd)
- Date: 2023-04-28
- Original: https://www.enforcementtracker.com/ETid-1798
- Canonical: https://overview.legal/posts/47913
- Topics: DPIA, Privacy Impact Assessment, Employees, Security, Processing Agreement, Supervisory Authorities, Law Enforcement

## Summary

The Spanish DPA (AEPD) has imposed a fine on ALBERO FORTE COMPOSITE, S.L.. The company had taken pictures of employees at the entrance for the purpose of recording their working hours. However, the company had failed to conduct a data protection impact assessment. The original fine of EUR 20,000 was reduced to EUR 12,000 due to voluntary payment and admission of responsibility.

## Full text

The Spanish DPA (AEPD) has imposed a fine on ALBERO FORTE COMPOSITE, S.L.. The company had taken pictures of employees at the entrance for the purpose of recording their working hours. However, the company had failed to conduct a data protection impact assessment. The original fine of EUR 20,000 was reduced to EUR 12,000 due to voluntary payment and admission of responsibility.

GDPR Articles: Art. 35 GDPR
Industry: Employment

---
Generated by overview.legal · https://overview.legal/posts/47913 · 2026-08-22