The AEPD penalizes the owner of a website with 2,000 euros for not complying with the provisions of the RGPD, specifically with Article 13 regarding the information to be provided on the processing of personal data collected on the web when personal data are obtained from the data subject.
The complaint deals with the lack of information detected by the claimant when registering for the newsletter of the defendant’s website or when entering personal data in the contact forms of the same.
The AEPD points out the provision of Recital 60, which describes the need to process data on the basis of the principles of fairness and transparency, providing the data subject with information about the processing. Thus, it is ascertained that in addition to the lack of information, there is also no privacy policy.