# Vueling Airlines: Insufficient legal basis for data processing

- Type: Enforcement
- Source: Spanish Data Protection Authority (aepd)
- Date: 2019-10-01
- Original: https://www.enforcementtracker.com/ETid-86
- Canonical: https://overview.legal/posts/46201
- Topics: Cookies, Processing, Supervisory Authorities

## Summary

The Spanish Data Protection Agency (AEPD) has sanctioned Vueling Airlines with 30,000 euros for not giving users the ability to refuse their cookies and force them to use them if they want to browse its website. In other words, it was not possible to browse the Vueling page without accepting their cookies. AEDP issued a sanctioning resolution for the amount of 30,000 euros, which could be reduced to 18,000 for immediate payment.

## Full text

The Spanish Data Protection Agency (AEPD) has sanctioned Vueling Airlines with 30,000 euros for not giving users the ability to refuse their cookies and force them to use them if they want to browse its website. In other words, it was not possible to browse the Vueling page without accepting their cookies. AEDP issued a sanctioning resolution for the amount of 30,000 euros, which could be reduced to 18,000 for immediate payment.

GDPR Articles: Art. 5 GDPR, Art. 6 GDPR
Industry: Transportation and Energy

---
Generated by overview.legal · https://overview.legal/posts/46201 · 2026-08-22