Spain

Miguel Ibáñez Bezanilla, S.L.

3,000 €

GDPR enforcement action by Spanish Data Protection Authority (aepd) on 2020-11-10.

Rank · Sector

#360

of 595 in Industry and Commerce

Rank · Spain

#599

of 1,070

Rank · All fines

#2,009

of 3,039

Case details

Authority: Spanish Data Protection Authority (aepd)
Date: 2020-11-10
Controller / Processor: Miguel Ibáñez Bezanilla, S.L.
Sector: Industry and Commerce
Quoted Articles: Art. 13 GDPR, Art. 32 GDPR
Type of violation: Insufficient technical and organisational measures to ensure information security

Summary

The company's website (license plate seller) requested personal information such as first and last name, copy of ID card and driver's license, and the car's VIN number, but offered neither an encrypted transport protocol ("https" instead of "http") nor an updated data processing policy in accordance with the GDPR.

Open original source Links to the regulator's original publication or another source.