Spain

CAFFE VECCHIO, S.L.

1,500 €

GDPR enforcement action by Spanish Data Protection Authority (aepd) on 2022-04-28.

Rank · Sector

#192

of 213 in Employment

Rank · Spain

#774

of 1,075

Rank · All fines

#2,506

of 3,050

Case details

Authority: Spanish Data Protection Authority (aepd)
Date: 2022-04-28
Controller / Processor: CAFFE VECCHIO, S.L.
Sector: Employment
Quoted Articles: Art. 5 (1) f) GDPR, Art. 6 (1) a) GDPR
Type of violation: Insufficient legal basis for data processing

Summary

The Spanish DPA has fined CAFFE VECCHIO, S.L. EUR 1,500. A former employee of the café had filed a complaint with the DPA. The operator of the café had responded to negative online reviews regarding the café, disclosing personal data of the former employee. In addition, the operator published information on the reasons for the termination of the employment relationship.

Open original source Links to the regulator's original publication or another source.