Spain

NANDIVALE, S.L

10,000 €

GDPR enforcement action by Spanish Data Protection Authority (aepd) on 2023-07-17.

Rank · Sector

#228

of 597 in Industry and Commerce

Rank · Spain

#409

of 1,075

Rank · All fines

#1,397

of 3,050

Case details

Authority: Spanish Data Protection Authority (aepd)
Date: 2023-07-17
Controller / Processor: NANDIVALE, S.L
Sector: Industry and Commerce
Quoted Articles: Art. 6 (1) GDPR
Type of violation: Insufficient legal basis for data processing

Summary

The Spanish DPA has imposed a fine of EUR 10,000 on NANDIVALE, S.L.. The controller had uploaded images on social media of a party at its premises showing minors. The mother of a child had filed a complaint due to the fact that she had not given her consent to the publication of the images. The DPA therefore found that the controller had unlawfully processed the images in the absence of a valid legal basis.

Open original source Links to the regulator's original publication or another source.