Debt collecting agancy (GESTIÓN DE COBROS, YO COBRO SL)
- Country
- Spain
- Fine
- 60,000 EUR
- Date
- Unknown(Unknown)
- Sector
- Business Sector
- Articles
- Art. 5 (1) f) GDPR
Insufficient legal basis for data processing
After the applicant allegedly failed to repay a microcredit to an online credit agency, the claim was assigned to the collection agency. The latter then began to send e-mails not only to the e-mail address provided by the applicant, but also to an institutional e-mail address of his workplace, which can be reached by any employee who was never provided by the applicant. Authority: Spanish Data Protection Authority (aepd)
Source: https://www.aepd.es/es/documento/ps-00561-2017.pdf
Reported by: Andersen Tax & Legal
