Curenergía Comercializador de último recurso
€75K($81K USD)final
Date Issued
2019-11-28
Regulation
Authority
Spanish Data Protection Authority (AEPD)
Country
Spain
Violation Type
Non-compliance with lawful basis for data processing
Currency
EUR
Violation Summary
A private individual complained that the company had used their personal data that included their first and last name, address and VAT number in order to open an electricity supply contract. The individual was a former customer of the company, and as such the company was not allowed anymore to reuse the former customer’s data without their permission.
Articles Violated
Art. 6 GDPR