The Spanish Data Protection Authority (AEPD) has fined Hubside Ibérica SL, Sociedad Limitada Unipersonal, for unlawful processing of personal data.
The person who initiated the proceedings by filing a complaint noted that his bank account had been debited with several transactions for services that had not been performed. The complainant gave Hubside her details at one of the outlets to enter into a contract. Subsequently, the would-be customer had a change of heart and ultimately did not want to use Hubside’s services. The controller informed her that her data would be deleted from the database. Despite this, data retention was not ensured and the complainant was billed.
The AEPD concluded that Hubside processed personal data illegally because it did not prove that the data subject had commissioned the services for which she was charged. As a result, AEPD imposed an administrative penalty on Hubside.