Sanction RGPD Spanish Data Protection Authority (aepd) — Fincas Miguel García S.L. : 2 k€ (2021)
- Autorité de contrôle
- Spanish Data Protection Authority (aepd)
- Pays
- Espagne
- Entreprise / secteur
- Fincas Miguel García S.L.
- Montant de l'amende
- 2 k€
- Date de la décision
- 26 juillet 2021
- Fondement juridique
- Art. 13
- Manquement
- Obligation d'information insuffisante
Résumé des faits
The Spanish DPA (AEPD) has fined Fincas Miguel García S.L. in the amount of EUR 2,000. A data subject had filed a complaint against the controller, alleging a breach of Art. 13 GDPR. The DPA found that the information provided to the data subject by the controller did not comply with the provisions of Art. 13 GDPR, as essential aspects were missing, such as information on the purposes of the processing for which the personal data collected are intended and its legal basis, as well as information on the legitimate interests of the controller that justify the processing, the period for which the personal data will be stored and the right to withdraw consent at any time.