Result of the resolution: Economic sanction
Forms provided by the entity in which personal data was collected did not contain all the extremes provided by Article 13 GDPR. Within the procedure, other facts that had been the subject of complaint were also filed, the most relevant: a) that the foundation did not implement security measures in data processing in unautomated formats. It is archived because there is no evidence to prove this, even uncritically. Presumance of innocence.b) Communication of data by the Foundation to other companies. As for some of the companies, it was archived for lack of proof, presumption of innocence. As far as the second company is concerned, there is no communication insofar as there is a contract for treatment between the Foundation and the aforementioned entity.