Spanish Data Protection Authority (AEPD) · 30 September 2020
Venu Sanz Chef, S.L.
Insufficient legal basis for data processing
Fine€3,000Fine issued
- Regulator
- Spanish Data Protection Authority (AEPD)
- Decided
- 30 September 2020
- Country
- Spain
- Sector
- Industry and Commerce
- Regulator’s reference
- Not recorded
- Fino case number
- 2020/ES/036
What happened
The Spanish DPA (AEPD) maintains that a company can not process personal and health data for commercial purposes without the prior consent of the data subject, as this infringes Article 5(1)(b) GDPR.
Summary from the GDPRhub page for this decision, written by its volunteers, not by Fino. CC BY-NC-SA 4.0.
Rules involved
- Data principles
- Unlawful processing
Sources
The facts on this page come from the sources above, as they recorded them. Nothing has been estimated or filled in. Not legal advice.
Spotted a mistake? Write to angelillolorenzo@gmail.com and quote 2020/ES/036.