Spain

Mercadona S.A.

170,000 €

GDPR enforcement action by Spanish Data Protection Authority (aepd) on 2022-05-13.

Rank · Sector

#70

of 597 in Industry and Commerce

Rank · Spain

#80

of 1,075

Rank · All fines

#396

of 3,050

Case details

Authority: Spanish Data Protection Authority (aepd)
Date: 2022-05-13
Controller / Processor: Mercadona S.A.
Sector: Industry and Commerce
Quoted Articles: Art. 6 GDPR, Art. 12 GDPR, Art. 15 GDPR
Type of violation: Insufficient legal basis for data processing

Summary

The Spanish DPA (AEPD) has imposed a fine of EUR 170,000 on the supermarket chain Mercadona S.A.. An individual had filed a complaint with the DPA. The individual had suffered an accident in one of the supermarkets and had asked Mercadona to provide the recordings of the accident from the video surveillance system in order to claim damages. However, Mercadona did not comply with this request. After the lawyer of the data subject asked Mercadona again to provide the recordings, Mercadona replied that the images had already been deleted.

Open original source Links to the regulator's original publication or another source.