Spanish Data Protection Authority (AEPD) · 21 October 2021
CAIXABANK PAYMENTS & CONSUMER EFC, EP, S.A.U.
Insufficient legal basis for data processing
Fine€3,000,000Fine issued
- Regulator
- Spanish Data Protection Authority (AEPD)
- Decided
- 21 October 2021
- Country
- Spain
- Sector
- Finance, Insurance and Consulting
- Regulator’s reference
- Not recorded
- Fino case number
- 2021/ES/045
What happened
The Spanish DPA fined a bank €3,000,000 for carrying out profiling for marketing purposes without obtaining valid consent, since it was not specific nor informed.
Summary from the GDPRhub page for this decision, written by its volunteers, not by Fino. CC BY-NC-SA 4.0.
Rules involved
- Unlawful processing
Sources
The facts on this page come from the sources above, as they recorded them. Nothing has been estimated or filled in. Not legal advice.
Spotted a mistake? Write to angelillolorenzo@gmail.com and quote 2021/ES/045.