Sanction RGPD Spanish Data Protection Authority (aepd) — CURENERGÍA COMERCIALIZADOR DE ÚLTIMO RECURSO S.A.U. : 6 k€ (2025)
- Autorité de contrôle
- Spanish Data Protection Authority (aepd)
- Pays
- Espagne
- Entreprise / secteur
- CURENERGÍA COMERCIALIZADOR DE ÚLTIMO RECURSO S.A.U.
- Montant de l'amende
- 6 k€
- Date de la décision
- 4 juillet 2025
- Fondement juridique
- Art. 5 (1) b), GDPR
- Manquement
- Non-respect des principes de traitement
Résumé des faits
The Spanish DPA imposed a fine of EUR 6,000 on CURENERGÍA COMERCIALIZADOR DE ÚLTIMO RECURSO S.A.U. The controller processed personal data in order to conclude a contract. But the controller additionaly forwarded the data to a third party, infringing the principle of purpose limitation. The original fine of EUR 10,000 was reduced to EUR 6,000 due to immediate payment and admission of responsibility by the controller.