Details:

Summary The Spanish DPA has imposed a fine on CONCENTRA CENTRAL DE COMPRAS Y SERVICIOS S.L.. During its investigation, the DPA found that the controller had failed to properly and explicitly inform data subjects about their right of withdrawal. The original fine of EUR 2,000 was reduced to EUR 1,200 due to voluntary payment and acknowledgement of responsibility.
Link: link
Related articles:  Art. 21 (4) GDPR
Type: Insufficient fulfilment of data subjects rights
Fine: EUR 1,200
Sector Transportation and Energy

 

All data is based on The CMS’s Law GDPR Enforcement Tracker Source: https://www.enforcementtracker.com/

Tags: case law