Sanction RGPD Spanish Data Protection Authority (aepd) — LÃSER METALPRINT 3D, S.L. : 6 k€ (2025)
- Autorité de contrôle
- Spanish Data Protection Authority (aepd)
- Pays
- Espagne
- Entreprise / secteur
- LÃSER METALPRINT 3D, S.L.
- Montant de l'amende
- 6 k€
- Date de la décision
- 14 avril 2025
- Fondement juridique
- Art. 28
- Manquement
- Contrat de sous-traitance insuffisant
Résumé des faits
The Spanish DPA imposed a fine on LÃSER METALPRINT 3D, S.L. The controller hired a third company to install and maintain a surveillance system. The controller and the hired company had a data processing agreement. However not the hired company but another company processed the data. The controller and the processing (third) company did not have a data processing agreement, even though one was needed. The original fine of EUR 6,000 was reduced to EUR 10,000 due to immediate payment and admission of responsibility by the controller.