Spain

Iberia Lineas Aereas de Espana, S.A. Operadora Unipersonal

20,000 €

GDPR enforcement action by Spanish Data Protection Authority (aepd) on 2020-02-03.

Rank · Sector

#100

of 169 in Transportation and Energy

Rank · Spain

#338

of 1,078

Rank · All fines

#1,037

of 3,059

Case details

Authority: Spanish Data Protection Authority (aepd)
Date: 2020-02-03
Controller / Processor: Iberia Lineas Aereas de Espana, S.A. Operadora Unipersonal
Sector: Transportation and Energy
Quoted Articles: Art. 5 GDPR, Art. 6 GDPR, Art. 21 GDPR
Type of violation: Insufficient legal basis for data processing

Summary

Iberia continued to send e-mails to the data subject, despite the data subject had requested the withdrawal of his consent and the erasure of his personal data and that the execution of these measures had already been confirmed to him.

Open original source Links to the regulator's original publication or another source.