Spain

Debt collecting agancy (GESTIÓN DE COBROS, YO COBRO SL)

60,000 €

GDPR enforcement action by Spanish Data Protection Authority (aepd) on Unknown.

Rank · Sector

#116

of 323 in Finance, Insurance and Consulting

Rank · Spain

#173

of 1,078

Rank · All fines

#626

of 3,059

Case details

Authority: Spanish Data Protection Authority (aepd)
Date: Unknown
Controller / Processor: Debt collecting agancy (GESTIÓN DE COBROS, YO COBRO SL)
Sector: Finance, Insurance and Consulting
Quoted Articles: Art. 5 (1) f) GDPR
Type of violation: Insufficient legal basis for data processing

Summary

After the claimant did alledgedly not pay back a microcredit to an online credit agany, the claim was assigned to the debt collecting agancy. Subsequently, the latter startet sending emails not only to email addresses provided by the claimant but also to an institutional email address of his workplace accessible by any co-worker which was never provided by the claimant.

Open original source Links to the regulator's original publication or another source.