Enforcement
EN GYMOOGIMNASIOS S.L.: Non-compliance with general data processing principles
€10,000 fine - Spanish Data Protection Authority (aepd)
Content
The Spanish DPA has fined GYMOOGIMNASIOS S.L. EUR 10,000. The controller had installed a reservation system where data subjects had to consent to the processing of health-related data in order to use the system and the sports facility. The DPA considered this to be a violation of the principle of data minimization.
GDPR Articles: Art. 5 (1) c) GDPR, Art. 7 GDPR
Industry: Industry and Commerce