Sanction RGPD Spanish Data Protection Authority (aepd) — Working Capital Management España, S.L. : 40 k€ (2022)
- Autorité de contrôle
- Spanish Data Protection Authority (aepd)
- Pays
- Espagne
- Entreprise / secteur
- Working Capital Management España, S.L.
- Montant de l'amende
- 40 k€
- Date de la décision
- 28 avril 2022
- Fondement juridique
- Art. 6 (1)
- Manquement
- Base légale insuffisante pour le traitement
Résumé des faits
The Spanish DPA (AEPD) has imposed a fine of EUR 40,000 on the credit information agency Working Capital Management España, S.L.. A data subject had filed a complaint with the AEPD against the company. Fraudulent third parties had taken out a loan with NBQ Technology, S.A.U. in the name of the data subject without the data subject actually entering into a contract. After the data subject subsequently did not make payments, NBQ disclosed the data subject's information to Working Capital Management. The AEPD determined that Working Capital Management, has processed the data subjects data illegally since the personal data was entered into the company's information systems without checking whether the data subject had given their consent to the processing of their personal data.