Sanction RGPD Spanish Data Protection Authority (aepd) — GYMOOGIMNASIOS S.L. : 10 k€ (2023)
- Autorité de contrôle
- Spanish Data Protection Authority (aepd)
- Pays
- Espagne
- Entreprise / secteur
- GYMOOGIMNASIOS S.L.
- Montant de l'amende
- 10 k€
- Date de la décision
- 2 août 2023
- Fondement juridique
- Art. 5 (1) c), Art. 7
- Manquement
- Non-respect des principes de traitement
Résumé des faits
The Spanish DPA has fined GYMOOGIMNASIOS S.L. EUR 10,000. The controller had installed a reservation system where data subjects had to consent to the processing of health-related data in order to use the system and the sports facility. The DPA considered this to be a violation of the principle of data minimization.