Spain

GLP Instalaciones 86, SL

60,000 €

GDPR enforcement action by Spanish Data Protection Authority (aepd) on 2020-09-22.

Rank · Sector

#95

of 595 in Industry and Commerce

Rank · Spain

#180

of 1,070

Rank · All fines

#627

of 3,039

Case details

Authority: Spanish Data Protection Authority (aepd)
Date: 2020-09-22
Controller / Processor: GLP Instalaciones 86, SL
Sector: Industry and Commerce
Quoted Articles: Art. 5 GDPR, Art. 6 GDPR
Type of violation: Insufficient legal basis for data processing

Summary

In order to obtain assistance for the installation of an air conditioning system, the data subject had contacted Naturgy Energy Group S.A. Subsequently, he was contacted by two different companies, one of which was GLP Instalaciones 86, who pretended to be Naturgy employees. Naturgy denied this and claimed that the companies were neither authorized installers nor employees of Naturgy resulting in the processing of personal data of the data subject, including his/her name, surname, telephone number, bank details and e-mail, without a valid legal basis.

Open original source Links to the regulator's original publication or another source.