Details:

Summary Iberia continued to send e-mails to the data subject, despite the data subject had requested the withdrawal of his consent and the erasure of his personal data and that the execution of these measures had already been confirmed to him.
Link: link
Related articles:  Art. 5 GDPR, Art. 6 GDPR, Art. 21 GDPR
Type: Insufficient legal basis for data processing
Fine: EUR 20,000
Sector Transportation and Energy

 

All data is based on The CMS’s Law GDPR Enforcement Tracker Source: https://www.enforcementtracker.com/

Tags: case law