Mapfre España Compañia de Seguros y Reaseguros SA

What happened

The DPA reprimanded an insurance company after it placed cookies without the data subject's consent and unlawfully transferred data to the USA through the use of Google Analytics in violation of Chapter V of the GDPR.

Summary from GDPRhub (noyb), written by its volunteers, not by Fino. CC BY-NC-SA 4.0.

Rules involved

• Art. 5Principles relating to processing of personal data5(1)(a)Read →
• Art. 44General principle for transfersRead →
• Art. 45Transfers on the basis of an adequacy decisionRead →
• Art. 46Transfers subject to appropriate safeguards46(2)(c)Read →

• Data principles
• International transfers