Sanction RGPD Spanish Data Protection Authority (aepd) — UNITED PARCEL SERVICE ESPAÑA LTD. Y CIA SRC : 84 k€ (2023)
- Autorité de contrôle
- Spanish Data Protection Authority (aepd)
- Pays
- Espagne
- Entreprise / secteur
- UNITED PARCEL SERVICE ESPAÑA LTD. Y CIA SRC
- Montant de l'amende
- 84 k€
- Date de la décision
- 7 juin 2023
- Fondement juridique
- Art. 5 (1) f), Art. 32
- Manquement
- Mesures techniques et organisationnelles insuffisantes
Résumé des faits
The Spanish DPA has imposed a fine on UNITED PARCEL SERVICE ESPAÑA LTD. Y CIA SRC a fine. A person had filed a complaint against the controller because a package addressed to them was delivered to a store and not to their home without their consent, resulting in their postal address and telephone number being disclosed to third parties. The DPA considered this to be a violation of Art. 5 (1) f) GDPR and Art. 32 GDPR. The original fine of EUR 140,000 was reduced to EUR 84,000 due to voluntary payment and admission of guilt.