# ESTUDIO ALCAZAR DEL GENIL 2022, S.L.: Insufficient legal basis for data processing

- Type: Enforcement
- Source: Spanish Data Protection Authority (aepd)
- Date: 2025-03-28
- Original: https://www.enforcementtracker.com/ETid-2651
- Canonical: https://overview.legal/posts/48766
- Topics: Controllers, Personal Data, Processing, Data Controller, Processing Agreement, Supervisory Authorities, Law Enforcement

## Summary

The Spanish DPA imposed a fine on ESTUDIO ALCAZAR DEL GENIL 2022, S.L. The controller collected property data by having its employees visit and photograph the properties, including the name on the mailbox. The controller lacked a sufficient legal basis for the data and failed to inform the data subjects about the data processing. The original fine of EUR 20,000 was reduced to EUR 12,000 due to immediate payment and admission of responsibility by the controller.

## Full text

The Spanish DPA imposed a fine on ESTUDIO ALCAZAR DEL GENIL 2022, S.L. The controller collected property data by having its employees visit and photograph the properties, including the name on the mailbox. The controller lacked a sufficient legal basis for the data and failed to inform the data subjects about the data processing. The original fine of EUR 20,000 was reduced to EUR 12,000 due to immediate payment and admission of responsibility by the controller.

GDPR Articles: Art. 6 (1) GDPR, Art. 14 GDPR
Industry: Real Estate

---
Generated by overview.legal · https://overview.legal/posts/48766 · 2026-08-22