Spain

FUNDACIÓ PRIVADA UNIVERSITARIA EADA

1,200 €

GDPR enforcement action by Spanish Data Protection Authority (aepd) on 2023-05-05.

Rank · Sector

#373

of 391 in Public Sector and Education

Rank · Spain

#827

of 1,114

Rank · All fines

#2,710

of 3,223

Case details

Authority: Spanish Data Protection Authority (aepd)
Date: 2023-05-05
Controller / Processor: FUNDACIÓ PRIVADA UNIVERSITARIA EADA
Sector: Public Sector and Education
Quoted Articles: Art. 6 (1) GDPR
Type of violation: Insufficient legal basis for data processing

Summary

The Spanish DPA has imposed a fine on FUNDACIÓ PRIVADA UNIVERSITARIA EADA. An individual who had participated in a training event filed a complaint against the educational institution. The controller had used pictures of the training event, which showed the data subject, for promotional purposes without their consent. The original fine of EUR 2,000 was reduced to EUR 1,200 due to voluntary payment and admission of responsibility.

Open original source Links to the regulator's original publication or another source.