Sanction RGPD Spanish Data Protection Authority (aepd) — FACTOR ENERGÍA, S.A. : 24 k€ (2023)
- Autorité de contrôle
- Spanish Data Protection Authority (aepd)
- Pays
- Espagne
- Entreprise / secteur
- FACTOR ENERGÍA, S.A.
- Montant de l'amende
- 24 k€
- Date de la décision
- 2 janvier 2023
- Fondement juridique
- Art. 6 (1)
- Manquement
- Base légale insuffisante pour le traitement
Résumé des faits
The Spanish DPA has imposed a fine on a FACTOR ENERGÍA, S.A.. A data subject had filed a complaint with the DPA because they had received advertising messages from the controller even though no contractual relationship existed between them. According to the DPA, the controller had processed the data unlawfully in the absence of a valid legal basis. The original fine of EUR 40,000 was reduced to EUR 24,000 due to voluntary payment and admission of responsibility.