# SCHOOL FITNESS HOLIDAY & FRANCHISING, S.L.: Insufficient legal basis for data processing

- Type: Enforcement
- Source: Spanish Data Protection Authority (aepd)
- Date: 2025-03-28
- Original: https://www.enforcementtracker.com/ETid-2652
- Canonical: https://overview.legal/posts/48767
- Topics: Storage Limitation, Retention Period, Controllers, Processing Agreement, Education, Consent, Processing, Data Controller, Supervisory Authorities

## Summary

The Spanish DPA has imposed fine on SCHOOL FITNESS HOLIDAY & FRANCHISING, S.L. The controller offers fitness courses which are recorded and published. The consent obtained for the processing does not meet the legal standards. Additionally the controller does not limit the retention period of the data.. The original fine of EUR 36,000 was reduced to EUR 21,600 due to immediate payment and admission of responsibility by the controller.

## Full text

The Spanish DPA has imposed fine on SCHOOL FITNESS HOLIDAY & FRANCHISING, S.L. The controller offers fitness courses which are recorded and published. The consent obtained for the processing does not meet the legal standards. Additionally the controller does not limit the retention period of the data.. The original fine of EUR 36,000 was reduced to EUR 21,600 due to immediate payment and admission of responsibility by the controller.

GDPR Articles: Art. 5 (1) e) GDPR, Art. 7 GDPR, Art. 28 GDPR
Industry: Industry and Commerce

---
Generated by overview.legal · https://overview.legal/posts/48767 · 2026-08-22