Enforcement · Spanish Data Protection Authority (aepd) EN LLM context A cited markdown file you can paste into your AI assistant (ChatGPT, Claude, a RAG or project knowledge base) to ground it in this document. Contains: this document’s text, its sections with their topics, and the full text of every law provision it applies. Everything links back to its source on overview.legal — legal information, not advice.
Vueling Airlines: Insufficient legal basis for data processing
How it connects
Related across sources
Case Law Spanish court reviews DPA decision on KFC Spain website privacy information and DPO Literature The Court of Justice on the Excessiveness of Access Requests under the GDPR Case Law Rotterdam Court: DPA did not err in finding ING contactless chip payments GDPR-compliant Case Law Rb. Den Haag - C/09/689833 Guidance EDPB Annual Report 2025 Literature If it ain’t broke, don’t fix it? Ten improvements for the upcoming tenth anniversary of the General Data Protection Regulation
Full text
The Spanish Data Protection Agency (AEPD) has sanctioned Vueling Airlines with 30,000 euros for not giving users the ability to refuse their cookies and force them to use them if they want to browse its website. In other words, it was not possible to browse the Vueling page without accepting their cookies. AEDP issued a sanctioning resolution for the amount of 30,000 euros, which could be reduced to 18,000 for immediate payment.
Industry: Transportation and Energy
Original document at the source www.aepd.es