Enforcement
EN NANDIVALE, S.L: Insufficient legal basis for data processing
€10,000 fine - Spanish Data Protection Authority (aepd)
Content
The Spanish DPA has imposed a fine of EUR 10,000 on NANDIVALE, S.L.. The controller had uploaded images on social media of a party at its premises showing minors. The mother of a child had filed a complaint due to the fact that she had not given her consent to the publication of the images. The DPA therefore found that the controller had unlawfully processed the images in the absence of a valid legal basis.
GDPR Articles: Art. 6 (1) GDPR
Industry: Industry and Commerce