Spain

ALBERO FORTE COMPOSITE, S.L.

12,000 €

GDPR enforcement action by Spanish Data Protection Authority (aepd) on 2023-04-28.

Rank · Sector

#81

of 213 in Employment

Rank · Spain

#370

of 1,071

Rank · All fines

#1,265

of 3,042

Case details

Authority: Spanish Data Protection Authority (aepd)
Date: 2023-04-28
Controller / Processor: ALBERO FORTE COMPOSITE, S.L.
Sector: Employment
Quoted Articles: Art. 35 GDPR
Type of violation: Insufficient technical and organisational measures to ensure information security

Summary

The Spanish DPA (AEPD) has imposed a fine on ALBERO FORTE COMPOSITE, S.L.. The company had taken pictures of employees at the entrance for the purpose of recording their working hours. However, the company had failed to conduct a data protection impact assessment. The original fine of EUR 20,000 was reduced to EUR 12,000 due to voluntary payment and admission of responsibility.

Open original source Links to the regulator's original publication or another source.