Missing communication of DPD designation in the APDCAT.

The entity had not notified the Catalan Data Protection Authority the designation of a data protection officer who, according to Article 37.1 of the GDPR, is a mandatory designation for the entity. This obligation provided for in the GDPR was fully applicable and enforceable to the entity, since May 2018.