{"id":35384,"date":"2024-10-01T10:13:21","date_gmt":"2024-10-01T10:13:21","guid":{"rendered":"https:\/\/www.pkf-attest.es\/noticias\/compania-energetica-sancionada-por-aepd-2\/"},"modified":"2024-10-01T10:13:21","modified_gmt":"2024-10-01T10:13:21","slug":"compania-energetica-sancionada-por-aepd-2","status":"publish","type":"noticias","link":"https:\/\/www.pkf-attest.es\/en\/noticias\/compania-energetica-sancionada-por-aepd-2\/","title":{"rendered":"Energy company (En\u00e9rgya-VM) is sanctioned by the AEPD with a fine amounting to 2.5 million euros"},"content":{"rendered":"\n<div style=\"height:40px\" aria-hidden=\"true\" class=\"wp-block-spacer\"><\/div>\n\n\n\n<h2 class=\"wp-block-heading has-text-color has-link-color wp-elements-1\" id=\"h-energya-vm-es-multada-por-la-aepd-en-el-procedimiento-exp202304117\" style=\"color:#0f3780\">En\u00e9rgya-VM is fined by the AEPD in Proceeding EXP202304117<\/h2>\n\n\n\n<p class=\"has-text-color has-link-color wp-elements-2 wp-block-paragraph\" style=\"color:#000000\">The energy company En\u00e9rgya-VM has been sanctioned by the AEPD in Procedure EXP202304117 for breach of the principle of proactive responsibility (Article 5.2 of the GDPR) and breach of the principle of legality, fairness and transparency (Article 5.1.a) of the GDPR).<\/p>\n\n\n\n<p class=\"has-text-color has-link-color wp-elements-3 wp-block-paragraph\" style=\"color:#000000\">En\u00e9rgya-VM had contracted Nivalco&#8217;s services consisting of commercial prospecting. However, Nivalco&#8217;s customer recruitment work was irregular and it deceived customers in order to obtain En\u00e9rgya-VM&#8217;s services without them being aware of it. Specifically, Nivalco recruited customers using data illegally extracted from Naturgy (breach of Article 5.1.a) of the GDPR). En\u00e9rgya-VM was warned of the irregularities in the processing of personal data carried out by Nivalco in its customer recruitment work, which led it to adopt some measures in the form of instructions and audits to its supplier, although the irregularities continued. In this regard, the AEPD considers it decisive that En\u00e9rgya-VM has not established adequate and effective controls over its data processor:<\/p>\n\n\n\n<p class=\"has-text-color has-link-color wp-elements-4 wp-block-paragraph\" style=\"color:#000000\">1) I do not carry out any risk analysis in relation to this processor.<\/p>\n\n\n\n<p class=\"has-text-color has-link-color wp-elements-5 wp-block-paragraph\" style=\"color:#000000\">2) failed to carry out an adequate control of the origin of the personal data.<\/p>\n\n\n\n<p class=\"has-text-color has-link-color wp-elements-6 wp-block-paragraph\" style=\"color:#000000\">3) did not establish a continuous and exhaustive control of the voice recordings of the contracting process provided by said supplier.<\/p>\n\n\n\n<p class=\"has-text-color has-link-color wp-elements-7 wp-block-paragraph\" style=\"color:#000000\">4) failed to articulate an effective control mechanism over the performance of its data processor despite evidence that it was not following its instructions.<\/p>\n\n\n\n<p class=\"has-text-color has-link-color wp-elements-8 wp-block-paragraph\" style=\"color:#000000\">5) had a reactive rather than proactive attitude.<\/p>\n\n\n\n<p class=\"has-text-color has-link-color wp-elements-9 wp-block-paragraph\" style=\"color:#000000\">Not only is it important to articulate the data processor contract in accordance with the provisions of the GDPR, but measures must also be taken to ensure that only the data processor that offers sufficient guarantees in terms of data protection is chosen, for example through the corresponding supplier approval procedure and its subsequent periodic risk analysis. In summary, case of non-compliance with GDPR, as a real example, En\u00e9rgya-VM sanctioned by AEPD.<\/p>\n\n\n\n<div style=\"height:50px\" aria-hidden=\"true\" class=\"wp-block-spacer\"><\/div>\n","protected":false},"featured_media":11909,"template":"noticias-corporativa-single-post.php","categories":[],"tags":[214,212],"novedades_corporativa":[],"class_list":["post-35384","noticias","type-noticias","status-publish","has-post-thumbnail","tag-gdpr","tag-news","entry"],"acf":[],"yoast_head":"<!-- This site is optimized with the Yoast SEO Premium plugin v28.5 (Yoast SEO v28.5) - https:\/\/yoast.com\/product\/yoast-seo-premium-wordpress\/ -->\n<title>Energy company (En\u00e9rgya-VM) is sanctioned by the AEPD with a fine amounting to 2.5 million euros - PKF Attest<\/title>\n<meta name=\"description\" content=\"The AEPD penalizes the energy company En\u00e9rgya-VM with 2.5 million euros for non-compliance with the RPGD.\" \/>\n<meta name=\"robots\" content=\"index, follow, max-snippet:-1, max-image-preview:large, max-video-preview:-1\" \/>\n<link rel=\"canonical\" href=\"https:\/\/www.pkf-attest.es\/en\/noticias\/compania-energetica-sancionada-por-aepd-2\/\" \/>\n<meta property=\"og:locale\" content=\"en_US\" \/>\n<meta property=\"og:type\" content=\"article\" \/>\n<meta property=\"og:title\" content=\"Energy company (En\u00e9rgya-VM) is sanctioned by the AEPD with a fine amounting to 2.5 million euros\" \/>\n<meta property=\"og:description\" content=\"The AEPD penalizes the energy company En\u00e9rgya-VM with 2.5 million euros for non-compliance with the RPGD.\" \/>\n<meta property=\"og:url\" content=\"https:\/\/www.pkf-attest.es\/en\/noticias\/compania-energetica-sancionada-por-aepd-2\/\" \/>\n<meta property=\"og:site_name\" content=\"PKF Attest\" \/>\n<meta property=\"og:image\" content=\"https:\/\/www.pkf-attest.es\/wp-content\/uploads\/2024\/10\/RGPD-BOLETIN-NOTICIAS-scaled.jpg\" \/>\n\t<meta property=\"og:image:width\" content=\"2560\" \/>\n\t<meta property=\"og:image:height\" content=\"1708\" \/>\n\t<meta property=\"og:image:type\" content=\"image\/jpeg\" \/>\n<meta name=\"twitter:card\" content=\"summary_large_image\" \/>\n<meta name=\"twitter:label1\" content=\"Est. reading time\" \/>\n\t<meta name=\"twitter:data1\" content=\"2 minutes\" \/>\n<script type=\"application\/ld+json\" class=\"yoast-schema-graph\">{\"@context\":\"https:\\\/\\\/schema.org\",\"@graph\":[{\"@type\":\"WebPage\",\"@id\":\"https:\\\/\\\/www.pkf-attest.es\\\/en\\\/noticias\\\/compania-energetica-sancionada-por-aepd-2\\\/\",\"url\":\"https:\\\/\\\/www.pkf-attest.es\\\/en\\\/noticias\\\/compania-energetica-sancionada-por-aepd-2\\\/\",\"name\":\"Energy company (En\u00e9rgya-VM) is sanctioned by the AEPD with a fine amounting to 2.5 million euros - PKF Attest\",\"isPartOf\":{\"@id\":\"https:\\\/\\\/www.pkf-attest.es\\\/en\\\/#website\"},\"primaryImageOfPage\":{\"@id\":\"https:\\\/\\\/www.pkf-attest.es\\\/en\\\/noticias\\\/compania-energetica-sancionada-por-aepd-2\\\/#primaryimage\"},\"image\":{\"@id\":\"https:\\\/\\\/www.pkf-attest.es\\\/en\\\/noticias\\\/compania-energetica-sancionada-por-aepd-2\\\/#primaryimage\"},\"thumbnailUrl\":\"https:\\\/\\\/www.pkf-attest.es\\\/wp-content\\\/uploads\\\/2024\\\/10\\\/RGPD-BOLETIN-NOTICIAS-scaled.jpg\",\"datePublished\":\"2024-10-01T10:13:21+00:00\",\"description\":\"The AEPD penalizes the energy company En\u00e9rgya-VM with 2.5 million euros for non-compliance with the RPGD.\",\"breadcrumb\":{\"@id\":\"https:\\\/\\\/www.pkf-attest.es\\\/en\\\/noticias\\\/compania-energetica-sancionada-por-aepd-2\\\/#breadcrumb\"},\"inLanguage\":\"en-US\",\"potentialAction\":[{\"@type\":\"ReadAction\",\"target\":[\"https:\\\/\\\/www.pkf-attest.es\\\/en\\\/noticias\\\/compania-energetica-sancionada-por-aepd-2\\\/\"]}]},{\"@type\":\"ImageObject\",\"inLanguage\":\"en-US\",\"@id\":\"https:\\\/\\\/www.pkf-attest.es\\\/en\\\/noticias\\\/compania-energetica-sancionada-por-aepd-2\\\/#primaryimage\",\"url\":\"https:\\\/\\\/www.pkf-attest.es\\\/wp-content\\\/uploads\\\/2024\\\/10\\\/RGPD-BOLETIN-NOTICIAS-scaled.jpg\",\"contentUrl\":\"https:\\\/\\\/www.pkf-attest.es\\\/wp-content\\\/uploads\\\/2024\\\/10\\\/RGPD-BOLETIN-NOTICIAS-scaled.jpg\",\"width\":2560,\"height\":1708,\"caption\":\"Noticias semanales que afectan a empresas por el incumplimiento de normas RGPD\"},{\"@type\":\"BreadcrumbList\",\"@id\":\"https:\\\/\\\/www.pkf-attest.es\\\/en\\\/noticias\\\/compania-energetica-sancionada-por-aepd-2\\\/#breadcrumb\",\"itemListElement\":[{\"@type\":\"ListItem\",\"position\":1,\"name\":\"Home\",\"item\":\"https:\\\/\\\/www.pkf-attest.es\\\/en\\\/\"},{\"@type\":\"ListItem\",\"position\":2,\"name\":\"Energy company (En\u00e9rgya-VM) is sanctioned by the AEPD with a fine amounting to 2.5 million euros\"}]},{\"@type\":\"WebSite\",\"@id\":\"https:\\\/\\\/www.pkf-attest.es\\\/en\\\/#website\",\"url\":\"https:\\\/\\\/www.pkf-attest.es\\\/en\\\/\",\"name\":\"PKF Attest\",\"description\":\"PKF Attest\",\"publisher\":{\"@id\":\"https:\\\/\\\/www.pkf-attest.es\\\/en\\\/#organization\"},\"potentialAction\":[{\"@type\":\"SearchAction\",\"target\":{\"@type\":\"EntryPoint\",\"urlTemplate\":\"https:\\\/\\\/www.pkf-attest.es\\\/en\\\/?s={search_term_string}\"},\"query-input\":{\"@type\":\"PropertyValueSpecification\",\"valueRequired\":true,\"valueName\":\"search_term_string\"}}],\"inLanguage\":\"en-US\"},{\"@type\":\"Organization\",\"@id\":\"https:\\\/\\\/www.pkf-attest.es\\\/en\\\/#organization\",\"name\":\"PKF-Attest\",\"url\":\"https:\\\/\\\/www.pkf-attest.es\\\/en\\\/\",\"logo\":{\"@type\":\"ImageObject\",\"inLanguage\":\"en-US\",\"@id\":\"https:\\\/\\\/www.pkf-attest.es\\\/en\\\/#\\\/schema\\\/logo\\\/image\\\/\",\"url\":\"https:\\\/\\\/www.pkf-attest.es\\\/wp-content\\\/uploads\\\/2023\\\/12\\\/Logotipo_PKF-Attest-675x675-1.jpg\",\"contentUrl\":\"https:\\\/\\\/www.pkf-attest.es\\\/wp-content\\\/uploads\\\/2023\\\/12\\\/Logotipo_PKF-Attest-675x675-1.jpg\",\"width\":675,\"height\":675,\"caption\":\"PKF-Attest\"},\"image\":{\"@id\":\"https:\\\/\\\/www.pkf-attest.es\\\/en\\\/#\\\/schema\\\/logo\\\/image\\\/\"},\"sameAs\":[\"https:\\\/\\\/www.linkedin.com\\\/company\\\/1078028\\\/admin\\\/dashboard\\\/\"]}]}<\/script>\n<!-- \/ Yoast SEO Premium plugin. -->","yoast_head_json":{"title":"Energy company (En\u00e9rgya-VM) is sanctioned by the AEPD with a fine amounting to 2.5 million euros - PKF Attest","description":"The AEPD penalizes the energy company En\u00e9rgya-VM with 2.5 million euros for non-compliance with the RPGD.","robots":{"index":"index","follow":"follow","max-snippet":"max-snippet:-1","max-image-preview":"max-image-preview:large","max-video-preview":"max-video-preview:-1"},"canonical":"https:\/\/www.pkf-attest.es\/en\/noticias\/compania-energetica-sancionada-por-aepd-2\/","og_locale":"en_US","og_type":"article","og_title":"Energy company (En\u00e9rgya-VM) is sanctioned by the AEPD with a fine amounting to 2.5 million euros","og_description":"The AEPD penalizes the energy company En\u00e9rgya-VM with 2.5 million euros for non-compliance with the RPGD.","og_url":"https:\/\/www.pkf-attest.es\/en\/noticias\/compania-energetica-sancionada-por-aepd-2\/","og_site_name":"PKF Attest","og_image":[{"width":2560,"height":1708,"url":"https:\/\/www.pkf-attest.es\/wp-content\/uploads\/2024\/10\/RGPD-BOLETIN-NOTICIAS-scaled.jpg","type":"image\/jpeg"}],"twitter_card":"summary_large_image","twitter_misc":{"Est. reading time":"2 minutes"},"schema":{"@context":"https:\/\/schema.org","@graph":[{"@type":"WebPage","@id":"https:\/\/www.pkf-attest.es\/en\/noticias\/compania-energetica-sancionada-por-aepd-2\/","url":"https:\/\/www.pkf-attest.es\/en\/noticias\/compania-energetica-sancionada-por-aepd-2\/","name":"Energy company (En\u00e9rgya-VM) is sanctioned by the AEPD with a fine amounting to 2.5 million euros - PKF Attest","isPartOf":{"@id":"https:\/\/www.pkf-attest.es\/en\/#website"},"primaryImageOfPage":{"@id":"https:\/\/www.pkf-attest.es\/en\/noticias\/compania-energetica-sancionada-por-aepd-2\/#primaryimage"},"image":{"@id":"https:\/\/www.pkf-attest.es\/en\/noticias\/compania-energetica-sancionada-por-aepd-2\/#primaryimage"},"thumbnailUrl":"https:\/\/www.pkf-attest.es\/wp-content\/uploads\/2024\/10\/RGPD-BOLETIN-NOTICIAS-scaled.jpg","datePublished":"2024-10-01T10:13:21+00:00","description":"The AEPD penalizes the energy company En\u00e9rgya-VM with 2.5 million euros for non-compliance with the RPGD.","breadcrumb":{"@id":"https:\/\/www.pkf-attest.es\/en\/noticias\/compania-energetica-sancionada-por-aepd-2\/#breadcrumb"},"inLanguage":"en-US","potentialAction":[{"@type":"ReadAction","target":["https:\/\/www.pkf-attest.es\/en\/noticias\/compania-energetica-sancionada-por-aepd-2\/"]}]},{"@type":"ImageObject","inLanguage":"en-US","@id":"https:\/\/www.pkf-attest.es\/en\/noticias\/compania-energetica-sancionada-por-aepd-2\/#primaryimage","url":"https:\/\/www.pkf-attest.es\/wp-content\/uploads\/2024\/10\/RGPD-BOLETIN-NOTICIAS-scaled.jpg","contentUrl":"https:\/\/www.pkf-attest.es\/wp-content\/uploads\/2024\/10\/RGPD-BOLETIN-NOTICIAS-scaled.jpg","width":2560,"height":1708,"caption":"Noticias semanales que afectan a empresas por el incumplimiento de normas RGPD"},{"@type":"BreadcrumbList","@id":"https:\/\/www.pkf-attest.es\/en\/noticias\/compania-energetica-sancionada-por-aepd-2\/#breadcrumb","itemListElement":[{"@type":"ListItem","position":1,"name":"Home","item":"https:\/\/www.pkf-attest.es\/en\/"},{"@type":"ListItem","position":2,"name":"Energy company (En\u00e9rgya-VM) is sanctioned by the AEPD with a fine amounting to 2.5 million euros"}]},{"@type":"WebSite","@id":"https:\/\/www.pkf-attest.es\/en\/#website","url":"https:\/\/www.pkf-attest.es\/en\/","name":"PKF Attest","description":"PKF Attest","publisher":{"@id":"https:\/\/www.pkf-attest.es\/en\/#organization"},"potentialAction":[{"@type":"SearchAction","target":{"@type":"EntryPoint","urlTemplate":"https:\/\/www.pkf-attest.es\/en\/?s={search_term_string}"},"query-input":{"@type":"PropertyValueSpecification","valueRequired":true,"valueName":"search_term_string"}}],"inLanguage":"en-US"},{"@type":"Organization","@id":"https:\/\/www.pkf-attest.es\/en\/#organization","name":"PKF-Attest","url":"https:\/\/www.pkf-attest.es\/en\/","logo":{"@type":"ImageObject","inLanguage":"en-US","@id":"https:\/\/www.pkf-attest.es\/en\/#\/schema\/logo\/image\/","url":"https:\/\/www.pkf-attest.es\/wp-content\/uploads\/2023\/12\/Logotipo_PKF-Attest-675x675-1.jpg","contentUrl":"https:\/\/www.pkf-attest.es\/wp-content\/uploads\/2023\/12\/Logotipo_PKF-Attest-675x675-1.jpg","width":675,"height":675,"caption":"PKF-Attest"},"image":{"@id":"https:\/\/www.pkf-attest.es\/en\/#\/schema\/logo\/image\/"},"sameAs":["https:\/\/www.linkedin.com\/company\/1078028\/admin\/dashboard\/"]}]}},"_links":{"self":[{"href":"https:\/\/www.pkf-attest.es\/en\/wp-json\/wp\/v2\/noticias\/35384","targetHints":{"allow":["GET"]}}],"collection":[{"href":"https:\/\/www.pkf-attest.es\/en\/wp-json\/wp\/v2\/noticias"}],"about":[{"href":"https:\/\/www.pkf-attest.es\/en\/wp-json\/wp\/v2\/types\/noticias"}],"wp:featuredmedia":[{"embeddable":true,"href":"https:\/\/www.pkf-attest.es\/en\/wp-json\/wp\/v2\/media\/11909"}],"wp:attachment":[{"href":"https:\/\/www.pkf-attest.es\/en\/wp-json\/wp\/v2\/media?parent=35384"}],"wp:term":[{"taxonomy":"category","embeddable":true,"href":"https:\/\/www.pkf-attest.es\/en\/wp-json\/wp\/v2\/categories?post=35384"},{"taxonomy":"post_tag","embeddable":true,"href":"https:\/\/www.pkf-attest.es\/en\/wp-json\/wp\/v2\/tags?post=35384"},{"taxonomy":"novedades_corporativa","embeddable":true,"href":"https:\/\/www.pkf-attest.es\/en\/wp-json\/wp\/v2\/novedades_corporativa?post=35384"}],"curies":[{"name":"wp","href":"https:\/\/api.w.org\/{rel}","templated":true}]}}