ALT TEXT: New decision from Spain: The DPA fined a race organiser €15,000 for unlawfully collecting participants' health data related to COVID-19. The organiser failed properly inform the participants and to collect their explicit consent under Article 9(1)(a) GDPR