AEPD - PS/00127/2020
|AEPD - PS/00127/2020|
|Relevant Law:||Article 13 GDPR|
|Parties:||IBERIA LÍNEAS AÉREAS DE ESPAÑA, S.A. OPERADORA UNIPERSONAL|
|National Case Number/Name:||PS/00127/2020|
|European Case Law Identifier:||n/a|
|Original Source:||AEPD decision (in ES)|
The Spanish DPA issued a warning to Iberia Líneas Aéreas de España for not informing their workers in accordance with Article 13 GDPR regarding a fingerprint clock-in system.
English Summary[edit | edit source]
Facts[edit | edit source]
Iberia Líneas Aéreas de España installed a new fingerprint clock-in system for their workers. They did it following the guidance of the General Labour Confederation. However, Iberia did not inform their workers about the aspects of the general information duty included in Article 13 GDPR.
Dispute[edit | edit source]
Is this a violation of Article 13 GDPR?
Holding[edit | edit source]
The AEPD held that there had been a violation of Article 13. According to the Spanish authority, Iberia should have informed their workers about all the relevant aspects included in Article 13, informing in a clear, concise and complete way about the legal basis that allow such processing and about the rest of the relevant information, specially taking into account that the personal data involved are biometric data from Article 9.
Comment[edit | edit source]
Share your comments here!
Further Resources[edit | edit source]
Share blogs or news articles here!
English Machine Translation of the Decision[edit | edit source]
The decision below is a machine translation of the Spanish original. Please refer to the Spanish original for more details.