# Legal Entity: Insufficient legal basis for data processing

- Type: Enforcement
- Source: Slovenian Supervisory Authority (Informacijski pooblaščenec)
- Date: 2025-07-29
- Original: https://www.enforcementtracker.com/ETid-3006
- Canonical: https://overview.legal/posts/52360
- Topics: Controllers, Processing, Processing Agreement, Data Controller, Supervisory Authorities, Supervision

## Summary

The Slovenian DPA has imposed a fine of EUR 11,614 on a legal entity. The controller did not delete the email address of a former employee, but rather continued to receive and process all emails sent to that address without a sufficient legal basis. The entity was fined EUR 10,614, and the person responsible was fined EUR 1,000.

## Full text

The Slovenian DPA has imposed a fine of EUR 11,614 on a legal entity. The controller did not delete the email address of a former employee, but rather continued to receive and process all emails sent to that address without a sufficient legal basis. The entity was fined EUR 10,614, and the person responsible was fined EUR 1,000.

GDPR Articles: Art. 5 (1) a) GDPR, Art. 6 (1) GDPR
Industry: Not assigned

---
Generated by overview.legal · https://overview.legal/posts/52360 · 2026-08-22