Enforcement
EN ESTUDIO ALCAZAR DEL GENIL 2022, S.L.: Insufficient legal basis for data processing
€12,000 fine - Spanish Data Protection Authority (aepd)
Content
The Spanish DPA imposed a fine on ESTUDIO ALCAZAR DEL GENIL 2022, S.L. The controller collected property data by having its employees visit and photograph the properties, including the name on the mailbox. The controller lacked a sufficient legal basis for the data and failed to inform the data subjects about the data processing. The original fine of EUR 20,000 was reduced to EUR 12,000 due to immediate payment and admission of responsibility by the controller.
GDPR Articles: Art. 6 (1) GDPR, Art. 14 GDPR
Industry: Real Estate