# NANDIVALE, S.L: Insufficient legal basis for data processing

- Type: Enforcement
- Source: Spanish Data Protection Authority (aepd)
- Date: 2023-07-17
- Original: https://www.enforcementtracker.com/ETid-1964
- Canonical: https://overview.legal/posts/48079
- Topics: Social Media, Controllers, Processing Agreement, Consent, Processing, Minors, Data Controller, Supervisory Authorities, Law Enforcement

## Summary

The Spanish DPA has imposed a fine of EUR 10,000 on NANDIVALE, S.L.. The controller had uploaded images on social media of a party at its premises showing minors. The mother of a child had filed a complaint due to the fact that she had not given her consent to the publication of the images. The DPA therefore found that the controller had unlawfully processed the images in the absence of a valid legal basis.

## Full text

The Spanish DPA has imposed a fine of EUR 10,000 on NANDIVALE, S.L.. The controller had uploaded images on social media of a party at its premises showing minors. The mother of a child had filed a complaint due to the fact that she had not given her consent to the publication of the images. The DPA therefore found that the controller had unlawfully processed the images in the absence of a valid legal basis.

GDPR Articles: Art. 6 (1) GDPR
Industry: Industry and Commerce

---
Generated by overview.legal · https://overview.legal/posts/48079 · 2026-08-22