Recently, the Spanish Data Protection Agency (AEPD) has published a sanctioning resolution against a gym based on denunciation of a customer for using access control