Sanction RGPD Spanish Data Protection Authority (aepd) — GLP Instalaciones 86, SL : 60 k€ (2020)
- Autorité de contrôle
- Spanish Data Protection Authority (aepd)
- Pays
- Espagne
- Entreprise / secteur
- GLP Instalaciones 86, SL
- Montant de l'amende
- 60 k€
- Date de la décision
- 22 septembre 2020
- Fondement juridique
- Art. 5, Art. 6
- Manquement
- Base légale insuffisante pour le traitement
Résumé des faits
In order to obtain assistance for the installation of an air conditioning system, the data subject had contacted Naturgy Energy Group S.A. Subsequently, he was contacted by two different companies, one of which was GLP Instalaciones 86, who pretended to be Naturgy employees. Naturgy denied this and claimed that the companies were neither authorized installers nor employees of Naturgy resulting in the processing of personal data of the data subject, including his/her name, surname, telephone number, bank details and e-mail, without a valid legal basis.