Sanction RGPD Spanish Data Protection Authority (aepd) — Company : 1 k€ (2025)
- Autorité de contrôle
- Spanish Data Protection Authority (aepd)
- Pays
- Espagne
- Entreprise / secteur
- Company
- Montant de l'amende
- 1 k€
- Date de la décision
- 1 septembre 2025
- Fondement juridique
- Art. 6
- Manquement
- Base légale insuffisante pour le traitement
Résumé des faits
The Spanish DPA has imposed a fine of EUR 1,200 on a company. The controller used personal data for a purpose, which did not align with the initial purpose. The original fine of EUR 2,000 was reduced to EUR 1,200 due to immediate payment and admission of responsibility by the controller.