Spain

Iberia Lineas Aereas de Espana, S.A. Operadora Unipersonal

20,000 €

GDPR enforcement action by Spanish Data Protection Authority (aepd) on 2020-02-03.

Rank · Sector

#99

of 167 in Transportation and Energy

Rank · Spain

#335

of 1,075

Rank · All fines

#1,032

of 3,050

Case details

Authority: Spanish Data Protection Authority (aepd)
Date: 2020-02-03
Controller / Processor: Iberia Lineas Aereas de Espana, S.A. Operadora Unipersonal
Sector: Transportation and Energy
Quoted Articles: Art. 5 GDPR, Art. 6 GDPR, Art. 21 GDPR
Type of violation: Insufficient legal basis for data processing

Summary

Iberia continued to send e-mails to the data subject, despite the data subject had requested the withdrawal of his consent and the erasure of his personal data and that the execution of these measures had already been confirmed to him.

Open original source Links to the regulator's original publication or another source.