AEPD (Spain) - PS/00315/2019
| AEPD - PS/00315/2019 | |
|---|---|
 | |
| Authority: | AEPD (Spain) |
| Jurisdiction: | Spain |
| Relevant Law: | Article 13 GDPR |
| Type: | Complaint |
| Outcome: | Upheld |
| Decided: | n/a |
| Published: | 14.02.2020 |
| Fine: | None |
| Parties: | A.A.A. v. ASOCIACIÓN ESPAÑOLA PARA LA PREVENCIÓN DEL ACOSACOLAR |
| National Case Number: | PS/00315/2019 |
| European Case Law Identifier | n/a |
| Appeal: | n/a |
| Original Language: |
Spanish |
| Original Source: | AEPD (in ES) |
The AEPD confirmed that processing personal data without providing an easily accessible privacy notice is a violation of Article 13 GDPR.
English Summary
Facts
The controller processed personal data without providing an easily accessible privacy policy. Furthermore, the privacy notice did not fully inform the users on their rights under the GDPR.
Dispute
Whether the privacy policy should be easy to find and what level of details it should include with regard to the user's rights.
Holding
The AEDP found that the information provided was in breach of Article 13 GDPR. Therefore, the authority warned the controller (Article 83(5) GDPR) and requested to complete the notice respecting the criteria of Article 13 GDPR.
Comment
Share your comments here!
Further Resources
Share blogs or news articles here!
English Machine Translation of the Decision
The decision below is a machine translation of the original. Please refer to the Spanish original for more details.
To be added.
