Gesthotel Activos Balagares
€15K($16K USD)final
Date Issued
2020-03-09
Regulation
Authority
Spanish Data Protection Authority (AEPD)
Country
Spain
Violation Type
Non-compliance with lawful basis for data processing
Currency
EUR
Violation Summary
The complainant explained that they had sent a letter to the management of the hotel and union delegates that contained information related to an episode of alleged harassment in relation to a medical condition. The hotel management then read the contents of the letter in a meeting with other employees. This constituted a violation of the principle of integrity and confidentiality.
Articles Violated
Art. 5 (1) f) GDPR