Spain

SANITAS, S.A. DE SEGUROS

160,000 €

GDPR enforcement action by Spanish Data Protection Authority (aepd) on 2024-02-06.

Rank · Sector

#68

of 322 in Finance, Insurance and Consulting

Rank · Spain

#81

of 1,075

Rank · All fines

#398

of 3,050

Case details

Authority: Spanish Data Protection Authority (aepd)
Date: 2024-02-06
Controller / Processor: SANITAS, S.A. DE SEGUROS
Sector: Finance, Insurance and Consulting
Quoted Articles: Art. 6 GDPR, Art. 9 GDPR
Type of violation: Insufficient legal basis for data processing

Summary

The Spanish DPA has imposed a fine on SANITAS, S.A. DE SEGUROS. A customer had filed a complaint with the DPA due to the fact that the controller had concluded a contract without obtaining their consent. The original fine of EUR 200,000 was reduced to EUR 160,000 due to voluntary payment.

Open original source Links to the regulator's original publication or another source.