On May 24, 2021, a telephone conversation with an employee of the claimed entity was recorded without any informed consent and not following the principle of data minimization. . Through an email sent by the representative, he learned that his conversation was recorded, a fact he was not informed about. On November 15, 2021, the Spanish DPA agreed to initiate disciplinary proceedings for the alleged infringement of Article 5.1.c). After the investigation, the Spanish Data Protection authority imposed a fine because the employee had recorded the customer conversation without the consent of the data subject and without this being necessary.
