Spain

Miguel Ibáñez Bezanilla, S.L.

3,000 €

GDPR enforcement action by Spanish Data Protection Authority (aepd) on 2020-11-10.

Rank · Sector

#363

of 599 in Industry and Commerce

Rank · Spain

#606

of 1,078

Rank · All fines

#2,025

of 3,059

Case details

Authority: Spanish Data Protection Authority (aepd)
Date: 2020-11-10
Controller / Processor: Miguel Ibáñez Bezanilla, S.L.
Sector: Industry and Commerce
Quoted Articles: Art. 13 GDPR, Art. 32 GDPR
Type of violation: Insufficient technical and organisational measures to ensure information security

Summary

The company's website (license plate seller) requested personal information such as first and last name, copy of ID card and driver's license, and the car's VIN number, but offered neither an encrypted transport protocol ("https" instead of "http") nor an updated data processing policy in accordance with the GDPR.

Open original source Links to the regulator's original publication or another source.