The Spanish data protection authority imposed a fine of EUR 10,000 on the telemarketing company ALPA 57 PRODUCCIONES for violating Art. 6 para. 1 GDPR. The proceedings were initiated following a complaint that the company was processing the personal data of a data subject (including address, bank details, email and telephone number) without a legal basis. The data was passed on to an energy supplier for telemarketing purposes, even though the data subject had not given their consent. The company was unable to prove that there was a legal basis for the data processing.