Spain

Debt collecting agancy (GESTIÓN DE COBROS, YO COBRO SL)

60,000 €

GDPR enforcement action by Spanish Data Protection Authority (aepd) on Unknown.

Rank · Sector

#115

of 322 in Finance, Insurance and Consulting

Rank · Spain

#170

of 1,075

Rank · All fines

#621

of 3,050

Case details

Authority: Spanish Data Protection Authority (aepd)
Date: Unknown
Controller / Processor: Debt collecting agancy (GESTIÓN DE COBROS, YO COBRO SL)
Sector: Finance, Insurance and Consulting
Quoted Articles: Art. 5 (1) f) GDPR
Type of violation: Insufficient legal basis for data processing

Summary

After the claimant did alledgedly not pay back a microcredit to an online credit agany, the claim was assigned to the debt collecting agancy. Subsequently, the latter startet sending emails not only to email addresses provided by the claimant but also to an institutional email address of his workplace accessible by any co-worker which was never provided by the claimant.

Open original source Links to the regulator's original publication or another source.