On May 21 and November 4, 2019, a claim was filed against GLOVOAPP23, S.L. Before the Spanish Agency for Data Protection.
The reasons for the claim is that GLOVOAPP23 S.L. It does not have a Data Protection Officer (DPD) appointed.
It is considered that the lack of designation of DPD gives rise to the violation of article 37.1 b) of the General Data Protection Regulation and article 34 of the Organic Law on Data Protection and guarantees of digital rights.
Although the organization has a Data Protection Committee that performs the functions of a Protection Delegate of Data, at the time of initiating the sanctioning procedure there was no mention of the Data Protection Delegate in the
website of the complained person nor was it registered with the Spanish Agency for Data Protection.
GLOVOAPP23 S.L. a fine of € 25,000 for being considered infringed of article 37 of the General Data Protection Regulation that regulates when a Data Protection Delegate must be appointed.