Sanction RGPD Spanish Data Protection Authority (aepd) — Unknown : 9 k€ (2021)
- Autorité de contrôle
- Spanish Data Protection Authority (aepd)
- Pays
- Espagne
- Entreprise / secteur
- Unknown
- Montant de l'amende
- 9 k€
- Date de la décision
- 2 mars 2021
- Fondement juridique
- Art. 6, Art. 13
- Manquement
- Base légale insuffisante pour le traitement
Résumé des faits
The Spanish DPA (AEPD) imposed a fine of EUR 9,000 on a website operator. The controller had published photos of the data subject on its website without the consent of the data subject. Also, the website in question did not contain a privacy statement. The fine is composed as follows: EUR 5,000 for a violation of Art. 6 GDPR and EUR 4,000 for a violation of Art. 13 GDPR.