Spain

TNT EXPRESS WORLDWIDE SPAIN, S.L.

10,000 €

GDPR enforcement action by Spanish Data Protection Authority (aepd) on 2021-06-22.

Rank · Sector

#213

of 597 in Industry and Commerce

Rank · Spain

#395

of 1,075

Rank · All fines

#1,342

of 3,050

Case details

Authority: Spanish Data Protection Authority (aepd)
Date: 2021-06-22
Controller / Processor: TNT EXPRESS WORLDWIDE SPAIN, S.L.
Sector: Industry and Commerce
Quoted Articles: Art. 5 (1) d) GDPR
Type of violation: Non-compliance with general data processing principles

Summary

The Spanish DPA (AEPD) has imposed a fine of EUR 10,000 on TNT EXPRESS WORLDWIDE SPAIN, S.L.. The data subject had placed a private order with the controller and had entered the address of his workplace as the delivery address. The delivery was correctly delivered, but the invoice was issued to the company where the data subject was employed and not to the data subject. Both the invoice and the delivery bill contained various personal data of the data subject. These were disclosed to his employer as a result of the incident.

Open original source Links to the regulator's original publication or another source.