Enforcement · Spanish Data Protection Authority (aepd) EN LLM context A cited markdown file you can paste into your AI assistant (ChatGPT, Claude, a RAG or project knowledge base) to ground it in this document. Contains: this document’s text, its sections with their topics, and the full text of every law provision it applies. Everything links back to its source on overview.legal — legal information, not advice.

THE RED KIWI, S.L.: Insufficient legal basis for data processing

€30,000 Fine
THE RED KIWI, S.L.
SPAIN
Art. 5 GDPR Art. 32 GDPR
Controllers Processing Agreement Processing Supervisory Authorities Data Controller
Oct 3, 2025 Source

How it connects

Related across sources

Case Law Rb. Den Haag - C/09/689833 District Court Den Haag Case Law VG München - M 26a K 25.5210 Administrative Court Munich News CNIL (France) - SAN-2025-014 GDPRhub News CNIL (France) - SAN-2025-015 GDPRhub News VDAI (Litouwen) - Besluit nr. 3R-1700. GDPRhub Guidance Opinion 15/2025 on the draft decision of the Austrian Supervisory Authority (AT SA) regarding the certification criteria of BDO Consulting GmbH EDPB

Full text

The Spanish DPA has imposed a fine of EUR 30,000 on THE RED KIWI, S.L. The controller created a WhatsApp group for its customers, disclosing the mobile phone numbers of other customers to group members.

Industry: Industry and Commerce

Original document at the source www.aepd.es

Similar Content