# AXESOR CONOCER PARA DECIDIR S.A.U.: Insufficient legal basis for data processing

- Type: Enforcement
- Source: Spanish Data Protection Authority (aepd)
- Date: 2026-09-21
- Original: https://www.enforcementtracker.com/ETid-3357
- Canonical: https://overview.legal/posts/603872
- Topics: Supervisory Authorities, Insurance

## Summary

The Spanish Data Protection Authority (AEPD) fined AXESOR CONOCER PARA DECIDIR S.A.U. €128,000 for processing personal data without a sufficient legal basis, finding violations of Article 6(1) and Article 14 of the GDPR. The case involved a company operating in the finance, insurance, and consulting sector that failed to establish a valid lawful basis for its data processing activities and did not properly inform data subjects about the processing of their personal data.

## Full text

Spanish Data Protection Authority (aepd) fined AXESOR CONOCER PARA DECIDIR S.A.U. €128,000 on 2026-09-21 for: Insufficient legal basis for data processing.
GDPR Articles: Art. 6 (1) GDPR, Art. 14 GDPR
Sector: Finance, Insurance and Consulting
Country: Spain
Source: https://www.aepd.es/documento/ps-00464-2025.pdf

---
Generated by overview.legal · https://overview.legal/posts/603872 · 2026-10-24