ALBERO FORTE COMPOSITE, S.L. – €12,000 Fine (Spain, 2023)
General GDPR enforcement action
This case relates to broader data protection obligations, not specifically to cookie or consent banner compliance. It is not included in cookie statistics or the Risk Calculator.
ALBERO FORTE COMPOSITE, S.L. was fined EUR 12,000 by the Spanish data authority for not conducting a data protection impact assessment when photographing employees to track work hours. This highlights the need for businesses to evaluate privacy risks when collecting employee data.
What happened
The company took photos of employees to record work hours without performing a data protection impact assessment.
Who was affected
Employees of ALBERO FORTE COMPOSITE, S.L. whose photos were taken at the workplace entrance.
What the authority found
The Spanish DPA ruled that the company violated GDPR by not assessing the privacy risks of collecting employee data.
Why this matters
This case emphasizes the importance of conducting privacy assessments before collecting personal data, especially in workplace settings. Businesses should ensure they evaluate and mitigate privacy risks to comply with GDPR.
GDPR Articles Cited
The Spanish DPA (AEPD) has imposed a fine on ALBERO FORTE COMPOSITE, S.L.. The company had taken pictures of employees at the entrance for the purpose of recording their working hours. However, the company had failed to conduct a data protection impact assessment. The original fine of EUR 20,000 was reduced to EUR 12,000 due to voluntary payment and admission of responsibility.
Related Enforcement Actions (0)
No other enforcement actions found for ALBERO FORTE COMPOSITE, S.L. in ES
This is the only recorded action for this entity in this jurisdiction.
Details
Fine Date
28 April 2023
Authority
Agencia Española de Protección de Datos
Fine Amount
€12,000
Enforcement Tracker ID
ETid-1798
About this data
Cite as: Cookie Fines. ALBERO FORTE COMPOSITE, S.L. - Spain (2023). Retrieved from cookiefines.eu
Last updated: