Iberia Lineas Aereas
€20K($22K USD)final
Date Issued
2020-02-03
Regulation
Authority
Spanish Data Protection Authority (AEPD)
Country
Spain
Violation Type
Non-compliance with lawful basis for data processing
Currency
EUR
Violation Summary
The company continued to send emails to individuals even after the affected individuals have requested to be removed from the company’s database or be added to a “no-contact” list.
Articles Violated
Art. 5 GDPRArt. 6 GDPRArt. 21 GDPR