Spain

Gesthotel Activos Balagares

15,000 €

GDPR enforcement action by Spanish Data Protection Authority (aepd) on 2020-03-09.

Rank · Sector

#76

of 213 in Employment

Rank · Spain

#358

of 1,075

Rank · All fines

#1,175

of 3,050

Case details

Authority: Spanish Data Protection Authority (aepd)
Date: 2020-03-09
Controller / Processor: Gesthotel Activos Balagares
Sector: Employment
Quoted Articles: Art. 5 (1) f) GDPR
Type of violation: Non-compliance with general data processing principles

Summary

The data subject argued that he had sent a private letter to the hotel management and union delegates containing information about an episode of harassment he had suffered, describing a specific medical condition. In violation of the principle of integrity and confidentiality, the hotel management and union delegates subsequently read the contents of this letter in a meeting with other employees.

Open original source Links to the regulator's original publication or another source.