Spain

CAFFE VECCHIO, S.L.

1,500 €

GDPR enforcement action by Spanish Data Protection Authority (aepd) on 2022-04-28.

Rank · Sector

#192

of 213 in Employment

Rank · Spain

#777

of 1,078

Rank · All fines

#2,514

of 3,059

Case details

Authority: Spanish Data Protection Authority (aepd)
Date: 2022-04-28
Controller / Processor: CAFFE VECCHIO, S.L.
Sector: Employment
Quoted Articles: Art. 5 (1) f) GDPR, Art. 6 (1) a) GDPR
Type of violation: Insufficient legal basis for data processing

Summary

The Spanish DPA has fined CAFFE VECCHIO, S.L. EUR 1,500. A former employee of the café had filed a complaint with the DPA. The operator of the café had responded to negative online reviews regarding the café, disclosing personal data of the former employee. In addition, the operator published information on the reasons for the termination of the employment relationship.

Open original source Links to the regulator's original publication or another source.