Spain

GYMOOGIMNASIOS S.L.

10,000 €

GDPR enforcement action by Spanish Data Protection Authority (aepd) on 2023-08-02.

Rank · Sector

#229

of 597 in Industry and Commerce

Rank · Spain

#411

of 1,075

Rank · All fines

#1,401

of 3,050

Case details

Authority: Spanish Data Protection Authority (aepd)
Date: 2023-08-02
Controller / Processor: GYMOOGIMNASIOS S.L.
Sector: Industry and Commerce
Quoted Articles: Art. 5 (1) c) GDPR, Art. 7 GDPR
Type of violation: Non-compliance with general data processing principles

Summary

The Spanish DPA has fined GYMOOGIMNASIOS S.L. EUR 10,000. The controller had installed a reservation system where data subjects had to consent to the processing of health-related data in order to use the system and the sports facility. The DPA considered this to be a violation of the principle of data minimization.

Open original source Links to the regulator's original publication or another source.