Spain

APOLLONIA TOPCO, S.L.

30,000 €

GDPR enforcement action by Spanish Data Protection Authority (aepd) on 2023-11-02.

Rank · Sector

#18

of 218 in Not assigned

Rank · Spain

#309

of 1,075

Rank · All fines

#915

of 3,050

Case details

Authority: Spanish Data Protection Authority (aepd)
Date: 2023-11-02
Controller / Processor: APOLLONIA TOPCO, S.L.
Sector: Not assigned
Quoted Articles: Art. 5 (1) c) GDPR, Art. 38 GDPR
Type of violation: Non-compliance with general data processing principles

Summary

The Spanish DPA has imposed a fine of EUR 30,000 on APOLLONIA TOPCO, S.L..
An individual had filed a complaint with the DPA due to the fact that, in order to receive a refund, they were required to send in their driving license as proof of identity. The DPA considered this to be a violation of the principle of data minimization, as the processing of the data on the driver's license was not necessary for the refund and the identity check could have been carried out with less intrusive means for the privacy of the data subject. In addition, the controller's data protection officer failed to properly respond to a request from the data subject.

Open original source Links to the regulator's original publication or another source.