# SANTANDER CONSUMER FINANCE, S.A.: Insufficient legal basis for data processing

- Type: Enforcement
- Source: Spanish Data Protection Authority (aepd)
- Date: 2024-08-22
- Original: https://www.enforcementtracker.com/ETid-2459
- Canonical: https://overview.legal/posts/48574
- Topics: Personal Data, Controllers, Insurance, Direct Marketing, Processing Agreement, Processing, Data Controller, Supervisory Authorities

## Summary

The Spanish DPA has imposed a fine of EUR 50,000 on SANTANDER CONSUMER FINANCE, S.A.. The fine followed a complaint from an individual who received advertising from the company, despite having previously informed them that their personal data should only be used for managing their credit card. The controller stated that this incident had occurred due to an employee error.

## Full text

The Spanish DPA has imposed a fine of EUR 50,000 on SANTANDER CONSUMER FINANCE, S.A.. The fine followed a complaint from an individual who received advertising from the company, despite having previously informed them that their personal data should only be used for managing their credit card. The controller stated that this incident had occurred due to an employee error.

GDPR Articles: Art. 6 (1) GDPR
Industry: Finance, Insurance and Consulting

---
Generated by overview.legal · https://overview.legal/posts/48574 · 2026-08-22