AEPD - PS/00285/2020
|AEPD - PS/00285/2020|
|Relevant Law:||Article 13 GDPR|
Article 37 GDPR
|Parties:||FEDERACIÓN DE BALONMANO DEL PRINCIPADO DEASTURIAS|
|National Case Number/Name:||PS/00285/2020|
|European Case Law Identifier:||n/a|
|Original Source:||AEPD decision (in ES)|
The AEPD warned the Asturian Handball Federation for not having appointed a DPO and not having complied with Article 13 GDPR.
English Summary[edit | edit source]
Facts[edit | edit source]
The Asturian Handball Federation alleged that they had two websites, one with domain .es and another with .com, and that they were coexisting due to an administrative error. The old one was not up-to-date, what is what caused the reference to the old Data Protection Act and the fact that they had non-updated forms for gathering data.
Dispute[edit | edit source]
Did the Asturian Handball Federation incur in any violation of GDPR given these facts?
Holding[edit | edit source]
For both these violations, the AEPD issued a warning.
However, the AEPD held that there was no violation regarding consent due to the fact that it is a public federation that, according to the law, processes the data that the sports clubs collect, and that therefore the obligations regarding consent lay on such clubs.
Comment[edit | edit source]
Share your comments here!
Further Resources[edit | edit source]
Share blogs or news articles here!
English Machine Translation of the Decision[edit | edit source]
The decision below is a machine translation of the Spanish original. Please refer to the Spanish original for more details.