Details:

Summary The Spanish DPA has imposed a fine on SANITAS, S.A. DE SEGUROS. A customer had filed a complaint with the DPA due to the fact that the controller had concluded a contract without obtaining their consent. The original fine of EUR 200,000 was reduced to EUR 160,000 due to voluntary payment.
Link: link
Related articles:  Art. 6 GDPR, Art. 9 GDPR
Type: Insufficient legal basis for data processing
Fine: EUR 160,000
Sector Finance, Insurance and Consulting

 

All data is based on The CMS’s Law GDPR Enforcement Tracker Source: https://www.enforcementtracker.com/

Tags: case law