Sanction RGPD Spanish Data Protection Authority (aepd) — CYNGASA, S.L. : 5 k€ (2021)
- Autorité de contrôle
- Spanish Data Protection Authority (aepd)
- Pays
- Espagne
- Entreprise / secteur
- CYNGASA, S.L.
- Montant de l'amende
- 5 k€
- Date de la décision
- 29 septembre 2021
- Fondement juridique
- Art. 6
- Manquement
- Base légale insuffisante pour le traitement
Résumé des faits
The Spanish DPA (AEPD) has imposed a fine of EUR 5,000 on CYNGASA, S.L.. The data subject, when requesting a work report, discovered that the controller had disclosed his personal data to a third party company without his consent. The data involved included among others first and last name as well as his social security number.