Spain

INSTAPACK, S.L.

3,000 €

GDPR enforcement action by Spanish Data Protection Authority (aepd) on 2021-07-27.

Rank · Sector

#369

of 597 in Industry and Commerce

Rank · Spain

#621

of 1,075

Rank · All fines

#2,043

of 3,050

Case details

Authority: Spanish Data Protection Authority (aepd)
Date: 2021-07-27
Controller / Processor: INSTAPACK, S.L.
Sector: Industry and Commerce
Quoted Articles: Art. 5 (1) a) GDPR, Art. 6 (1) a) GDPR
Type of violation: Insufficient legal basis for data processing

Summary

The Spanish DPA (AEPD) has imposed a fine of EUR 3,000 on INSTAPACK, S.L.. A data subject had filed a complaint with the DPA. The reason for the complaint is that he had been receiving thousands of SMS messages on his cell phone every month informing him of the receipt of orders and deliveries and in this context asking him to rate the company. He also stated that he had sent a request for deletion of his data to the contact address indicated on the controller's website, but without having received a reply. Even after he submitted the deletion request, the sending of the messages continued.

Open original source Links to the regulator's original publication or another source.