GDPR Fines

A public record of GDPR enforcement across Europe — compiled by INPLP members

Debt collecting agancy (GESTIÓN DE COBROS, YO COBRO SL)

Country
Spain
Fine
60,000 EUR
Date
Unknown(Unknown)
Sector
Business Sector
Articles
Art. 5 (1) f) GDPR

Insufficient legal basis for data processing

After the applicant allegedly failed to repay a microcredit to an online credit agency, the claim was assigned to the collection agency. The latter then began to send e-mails not only to the e-mail address provided by the applicant, but also to an institutional e-mail address of his workplace, which can be reached by any employee who was never provided by the applicant. Authority: Spanish Data Protection Authority (aepd)

Source: https://www.aepd.es/es/documento/ps-00561-2017.pdf

Reported by: Andersen Tax & Legal