Spain

Patio Ancestral S.L.

3,000 €

GDPR enforcement action by Spanish Data Protection Authority (aepd) on 2021-02-08.

Rank · Sector

#364

of 597 in Industry and Commerce

Rank · Spain

#606

of 1,075

Rank · All fines

#2,025

of 3,050

Case details

Authority: Spanish Data Protection Authority (aepd)
Date: 2021-02-08
Controller / Processor: Patio Ancestral S.L.
Sector: Industry and Commerce
Quoted Articles: Art. 6 GDPR
Type of violation: Insufficient legal basis for data processing

Summary

The Spanish DPA (AEPD) imposed a fine of EUR 5,000 on Patio Ancestral S.L.. The complainant worked for a construction company and had carried out some renovation work for the controller. During these works, damage had been caused to the controller's properties. The controller had then sent a letter with claims for damages not only to the complainant but also to the complainant's father, who had previously been employed by the same construction company. However, the father was an uninvolved third party in this case. The Spanish DPA found that the processing of the father's personal data for this reason had taken place without a legal basis. The original fine was reduced to EUR 3,000 due to immediate payment and admission of responsibility.

Open original source Links to the regulator's original publication or another source.