Content type · 1,205 documents in this view · 3,831 in total
Enforcement
Regulatory actions, fines, warnings, and enforcement decisions
Country: Spain (50) Clear filter
Filter by Topic Supervisory Authorities 3594 Processing 2644 Personal Data 2403 Controllers 2026 Processing Agreement 1114 Security 1018 Supervision 854 Healthcare 622 Law Enforcement 568 Monitoring 553 Public Authority 542 Consent 508
€136,000 Vodafone España, S.A.U.: Insufficient legal basis for data processing The Spanish DPA (AEPD) has imposed a fine on Vodafone España, S.A.U. A data subject had filed a complaint against the data controller as unauthorized fraudsters managed to access… SPAIN ·Art. 6, 32 Mar 15, 2023
€240 Private individual: Non-compliance with general data processing principles The Spanish DPA has imposed a fine on a private individual. A data subject had filed a complaint against their ex-partner with the DPA. The ex-partner had installed video… SPAIN ·Art. 5 Mar 14, 2023
€40,000 VODAFONE ONO, S.A.U.: Insufficient legal basis for data processing The Spanish DPA has imposed a fine on VODAFONE ONO, S.A.U.. The controller had carried out a credit check on an individual without there being a customer relationship or other… SPAIN ·Art. 6 Mar 10, 2023
€15,000 GRUPO NORCONSULTING, S.L.: Insufficient fulfilment of data subjects rights The Spanish DPA has imposed a fine of EUR 15,000 on GRUPO NORCONSULTING, S.L.. A data subject had filed a complaint against the controller with the DPA due to the controller's… SPAIN ·Art. 15, 17 Feb 28, 2023
€600 ECOMM MOVADGENCY S.L.: Insufficient fulfilment of data subjects rights The Spanish DPA has imposed a fine a ECOMM MOVADGENCY S.L. for sending out direct marketing messages, despite the fact that the data subjects had exercised their right to… SPAIN ·Art. 21 Feb 28, 2023
€800 EUROPYMES SERVICIOS INTEGRALES S.L.: Insufficient fulfilment of data subjects rights The Spanish Data Protection Authority has imposed a fine on EUROPYMES SERVICIOS INTEGRALES S.L.. The controller has not properly complied with the data subject's request for… SPAIN ·Art. 17 Feb 28, 2023
€1,800 WUNSCHURLAUB S.L.: Insufficient technical and organisational measures to ensure information security The Spanish DPA has fined WUNSCHURLAUB S.L. for storing passwords in plain text on its website www.meine-auszeit-jetzt.de. The DPA considered this to be a violation of Art. 32… SPAIN ·Art. 32 Feb 28, 2023
€3,000 CITIZENGO FOUNDATION: Insufficient legal basis for data processing The Spanish DPA has imposed a fine on CITIZENGO FOUNDATION. A person had filed a complaint with the DPA because the controller had sent them an email with election advertising… SPAIN ·Art. 7 Feb 28, 2023
€800 GUUDJOB WORLDWIDE S.L.: Insufficient fulfilment of data subjects rights The Spanish DPA has imposed a fine on GUUDJOB WORLDWIDE S.L.. An individual filed a complaint with the DPA claiming that the controller had not complied with their request to… SPAIN ·Art. 12, 17 Feb 28, 2023
€4,000 Attorney: Insufficient legal basis for data processing The Spanish DPA has imposed a fine of EUR 4,000 on an attorney. The attorney had sent a court ruling containing personal data of a data subject to several individuals via WhatsApp… SPAIN ·Art. 5, 6 Feb 27, 2023
€30,000 DISPLAY CONNECTORS, S.L.: Non-compliance with general data processing principles The Spanish DPA has imposed a fine on DISPLAY CONNECTORS, S.L.. An individual had filed a complaint with the DPA regarding the controller's publication of information about a… SPAIN ·Art. 5 Feb 22, 2023
€300 PLANET COSTA DORADA SOCIEDAD LIMITADA: Insufficient fulfilment of information obligations The Spanish DPA has imposed a fine of EUR 300 on PLANET COSTA DORADA SOCIEDAD LIMITADA. The controller had failed to provide a notice with information about video surveillance at… SPAIN ·Art. 13 Feb 21, 2023
€1,200 Private individual: Non-compliance with general data processing principles The Spanish DPA (AEPD) has imposed a fine of EUR 1,200 on a private individual. The controller had installed video surveillance cameras which, among other things, also covered the… SPAIN ·Art. 5, 13 Feb 21, 2023
€600 Private individual: Non-compliance with general data processing principles The Spanish DPA (AEPD) has imposed a fine of EUR 600 on a private individual. The controller had installed video surveillance cameras which, among other things, also covered the… SPAIN ·Art. 5, 13 Feb 21, 2023
€300 COMANDANCIA DE LLEIDA: Insufficient fulfilment of information obligations The Spanish DPA has imposed a fine of EUR 300 on COMANDANCIA DE LLEIDA. The controller had failed to provide a notice with information about video surveillance in its premises. SPAIN ·Art. 13 Feb 21, 2023
€300 Private individual: Insufficient fulfilment of information obligations The Spanish DPA (AEPD) has fined a private individual EUR 300 for failing to provide sufficient information about a video surveillance system installed at their property. SPAIN ·Art. 13 Feb 21, 2023
€300 Private individual: Non-compliance with general data processing principles The Spanish DPA (AEPD) has imposed a fine of EUR 300 on a private individual. The controller had installed video surveillance cameras which, among other things recorded a neighbor… SPAIN ·Art. 5 Feb 21, 2023
€300 Private individual: Non-compliance with general data processing principles The Spanish DPA (AEPD) has imposed a fine of EUR 300 on a private individual. The controller had installed video surveillance cameras which, among other things recorded the public… SPAIN ·Art. 5 Feb 21, 2023
€180 SUPER 24H LOS ROSALES, S.L.: Insufficient fulfilment of information obligations The Spanish DPA has imposed a fine on SUPER 24H LOS ROSALES, S.L.. The controller had failed to provide a notice with information about video surveillance in its premises. The… SPAIN ·Art. 13 Feb 21, 2023
€1,500 Private individual: Non-compliance with general data processing principles The Spanish DPA has imposed a fine of EUR 1,500 on a private individual. The controller sent an e-mail with personal data to several recipients in an open distribution list. This… SPAIN ·Art. 5, 32 Feb 21, 2023
€10,000 HERON CITY VALENCIA MANAGEMENT S.L.: Insufficient fulfilment of data subjects rights The Spanish DPA has imposed a fine of EUR 10,000 on HERON CITY VALENCIA MANAGEMENT S.L.. A data subject had complained to the DPA due to the controller's failure to comply with… SPAIN ·Art. 15 Feb 21, 2023
€300 Private individual: Insufficient legal basis for data processing The Spanish DPA has imposed a fine on a private individual. The individual had shared a document containing personal data of the data subject in a WhatsApp group without the data… SPAIN ·Art. 6 Feb 21, 2023
€500 Hiper Store S.L.: Insufficient fulfilment of information obligations The Spanish DPA has imposed a fine of EUR 500 on Hiper Store S.L.. The controller had installed a video surveillance system in its premises without sufficiently informing data… SPAIN ·Art. 13 Feb 8, 2023
€500 MIRACLE IBIZA S.L.: Non-compliance with general data processing principles The Spanish DPA has imposed a fine of EUR 500 on MIRACLE IBIZA S.L.. The controller had installed a video surveillance system that captured the front door of an individual's… SPAIN ·Art. 5 Feb 3, 2023
€600 HOTEL VILLA SORO, S.L.: Insufficient fulfilment of information obligations The Spanish DPA has imposed a fine on HOTEL VILLA SORO, S.L.. The controller had installed a video surveillance system without providing the required information according to Art.… SPAIN ·Art. 13 Feb 3, 2023
€180 SPAIN DPA: Insufficient fulfilment of information obligations The Spanish DPA has imposed a fine on a data controller. The data controller had failed to provide a notice with information about video surveillance in its premises. The original… Art. 13 ·Insufficient fulfilment of information obligations Jan 31, 2023
€600 Private individual: Non-compliance with general data processing principles The Spanish DPA (AEPD) has imposed a fine of EUR 600 on a private individual. The controller had installed video surveillance cameras which, among other things, also covered the… SPAIN ·Art. 5, 13 Jan 31, 2023
€600 Private individual: Non-compliance with general data processing principles The Spanish DPA has imposed a fine of EUR 600 on a private individual. The individual had installed a video surveillance camera at their home that recorded, among other things,… SPAIN ·Art. 5 Jan 31, 2023
€300 Private individual: Non-compliance with general data processing principles The Spanish DPA (AEPD) has imposed a fine of EUR 300 on a private individual. The controller had installed video surveillance cameras which, among other things recorded a neighbor… SPAIN ·Art. 5 Jan 27, 2023
€3,000 CASAL DE L'ESPLUGA DE FRANCOLÍ: Insufficient legal basis for data processing The Spanish DPA has imposed a fine on CASAL DE L'ESPLUGA DE FRANCOLÍ. A club managed by the controller had uploaded pictures of a competition showing minors on social media . The… SPAIN ·Art. 6 Jan 25, 2023
€180 SPAIN DPA: Insufficient fulfilment of information obligations The Spanish DPA has imposed a fine on a data controller. The data controller had failed to provide a notice with information about video surveillance in its premises. The original… Art. 13 ·Insufficient fulfilment of information obligations Jan 25, 2023
€300 Private individual: Non-compliance with general data processing principles The Spanish DPA (AEPD) has imposed a fine of EUR 300 on a private individual. The controller had installed video surveillance cameras which, among other things recorded a neighbor… SPAIN ·Art. 5 Jan 20, 2023
€360 TECNO MOTOR LA MUELA, S.L.L: Non-compliance with general data processing principles The Spanish DPA (AEPD) has imposed a fine on TECNO MOTOR LA MUELA, S.L.L.. The controller had installed video surveillance cameras which, among other things, also covered the… SPAIN ·Art. 5, 13 Jan 20, 2023
€56,000 BANCO BILBAO VIZCAYA ARGENTARIA, S.A: Non-compliance with general data processing principles The Spanish DPA has imposed a fine on BANCO BILBAO VIZCAYA ARGENTARIA, S.A.. An individual had filed a complaint with the DPA because the controller had disclosed their personal… SPAIN ·Art. 5, 32 Jan 19, 2023
€2,000 Private investigator: Insufficient fulfilment of information obligations The Spanish DPA has fined a private investigator EUR 2,000. An individual who had hired the investigator filed a complaint with the DPA. They stated that the controller had failed… SPAIN ·Art. 13 Jan 18, 2023
€600 Private individual: Non-compliance with general data processing principles The Spanish DPA (AEPD) has imposed a fine of EUR 600 on a private individual. The controller had installed video surveillance cameras which, among other things, also covered the… SPAIN ·Art. 5, 13 Jan 16, 2023
€56,000 Vodafone España, S.A.U.: Insufficient legal basis for data processing The Spanish DPA has imposed a fine on Vodafone España, S.A.U.. A person had filed a complaint with the DPA because the company had given a duplicate of their SIM card to an… SPAIN ·Art. 6 Jan 16, 2023
€40,000 Thomas International Systems, S.A.: Insufficient legal basis for data processing The Spanish DPA has imposed a fine on Thomas International Systems, S.A.. Thomas International performs psychological tests on behalf of other companies. Thomas International had… SPAIN ·Art. 9 Jan 16, 2023
€1,000 EDITORIAL RIBADEO S.L.: Insufficient cooperation with supervisory authority The Spanish DPA has imposed a fine of EUR 1,000 on EDITORIAL RIBADEO S.L. for failing to comply with an order issued by the DPA. SPAIN ·Art. 58 Jan 13, 2023
€3,000 SERVICIOS INTEGRALES DEL HOGAR TENERIFE, S.L.: Insufficient legal basis for data processing The Spanish DPA has imposed a fine on a SERVICIOS INTEGRALES DEL HOGAR TENERIFE, S.L.. A former employee had filed a complaint with the DPA due to the controller's unauthorized… SPAIN ·Art. 6 Jan 12, 2023
€120 Homeowners Association: Insufficient fulfilment of information obligations The Spanish DPA has imposed a fine on a homeowners' association for failing to provide sufficient information about video surveillance in the residential area. The original fine… SPAIN ·Art. 13 Jan 10, 2023
€300 Private individual: Non-compliance with general data processing principles The Spanish DPA (AEPD) fined a private individual EUR 300. The individual had installed video surveillance cameras on their property which covered, among other things, a… SPAIN ·Art. 5 Jan 10, 2023
€300 Private individual: Non-compliance with general data processing principles The Spanish DPA (AEPD) fined a private individual EUR 300. The individual had installed video surveillance cameras on their property which covered, among other things, a… SPAIN ·Art. 5 Jan 9, 2023
€3,000 Transport Workers' Union of Aragon: Non-compliance with general data processing principles The Spanish DPA has fined the Transport Workers' Union of Aragon EUR 3,000. The union had published a document with personal data (surname, first name and identity card number) of… SPAIN ·Art. 5, 32 Jan 3, 2023
€24,000 FACTOR ENERGÍA,
S.A.: Insufficient legal basis for data processing The Spanish DPA has imposed a fine on a FACTOR ENERGÍA, S.A.. A data subject had filed a complaint with the DPA because they had received advertising messages from the controller… SPAIN ·Art. 6 Jan 2, 2023
€3,000 ADENET SYSTEMS, S.L.: Insufficient cooperation with supervisory authority Failure to provide requested information to the Spanish DPA (AEPD) within the required timeframe in violation of Art. 58 GDPR. SPAIN ·Art. 58 Dec 29, 2022
€24,000 SUMINISTRADOR IBÉRICO DE ENERGÍA, S.L.: Insufficient legal basis for data processing The Spanish DPA has imposed a fine on SUMINISTRADOR IBÉRICO DE ENERGÍA, S.L.. A customer had filed a complaint with the DPA due to the fact that the controller carried out a… SPAIN ·Art. 6 Dec 29, 2022
€300 Store owner: Insufficient fulfilment of information obligations The Spanish DPA (AEPD) has fined a store owner EUR 300 for failing to provide information signs about CCTV surveillance in their premises. SPAIN ·Art. 13 Dec 28, 2022
€300 Homeowners Association: Insufficient fulfilment of information obligations The Spanish DPA has imposed a fine of EUR 300 on a homeowners' association for failing to provide sufficient information about video surveillance in the residential area. SPAIN ·Art. 13 Dec 28, 2022
€400 MAE WEST SYSTEMS, S.L.: Insufficient fulfilment of information obligations The Spanish DPA (AEPD) has fined MAE WEST SYSTEMS, S.L. EUR 400. The controller had installed video surveillance in a bar it operated without providing sufficient information… SPAIN ·Art. 13 Dec 28, 2022