Fine Tracker — Compliwatch

Imposed	Company	Country	Authority	Type	Amount	↗
26 Apr 2023	CARTONAJES BAÑERES, S.A.CARTONAJES BAÑERES, S.A. was fined by the AEPD 220,000 EUR for processing biometric data without the required data protection impact assessment. The authority also found a failure to comply with data subjects’ access rights.	ES	AEPD	GDPR	€220,000	↗
23 Jan 2024	CAIXA POPULAR - CAIXA RURAL SOC. COOP. DE CRÉDITO VCAIXA POPULAR was fined EUR 35,000 by the AEPD for a personal data breach. The incident allowed unauthorized third-party access and affected the confidentiality and integrity of the data.	ES	AEPD	GDPR	€35,000	↗
01 Jan 2024	ACTIVOS INTELIGENTES, S.L.ACTIVOS INTELIGENTES, S.L. was fined by the AEPD 5,000 EUR for requiring guests to submit selfies with their ID cards during check-in. The authority found the data collection excessive and not properly justified or explained in terms of processing purposes.	ES	AEPD	GDPR	€5,000	↗
01 Jan 2021	JUBASER DE CONTROL, S.L.JUBASER DE CONTROL, S.L. was fined by the AEPD 5,000 EUR for unlawful processing of personal data. The case concerned improper handling of a customer's ID and personal information, which later appeared on an adult contact website.	ES	AEPD	GDPR	€5,000	↗
10 Apr 2023	COLEGIO OFICIAL DE ARQUITECTOS DE GRANADACOLEGIO OFICIAL DE ARQUITECTOS DE GRANADA was fined €14,000 by the AEPD for data protection breaches. The authority found a conflict of interest in the appointment of the Data Protection Officer, missing required information on data processing in complaint forms, and the use of third-party cookies without user consent.	ES	AEPD	ePrivacy	€14,000	↗
06 Jun 2024	MÁRMOLES Y GRANITOS MEJIAS, S. L.The entity was fined by the AEPD for operating a video surveillance system with cameras directed toward public areas without the required administrative authorization. It also failed to provide legally compliant informational signage.	ES	AEPD	GDPR	€1,000	↗
15 Jan 2024	CUBILLO GALLEGO, S.L.CUBILLO GALLEGO, S.L. was fined by the AEPD 3,000 EUR for failing to provide adequate information about personal data processing on its website. The authority found a breach of Article 13 GDPR, which requires clear notice to data subjects.	ES	AEPD	GDPR	€3,000	↗
01 Jan 2020	CENTRO DE DIAGNÓSTICO ***LOCALIDAD.1, S.A.The entity was fined for breaching data confidentiality by improperly sharing medical information between different entities without consent. The case involved sensitive data processing and a lack of a valid legal basis for the disclosure.	ES	AEPD	GDPR	€10,000	↗
02 Nov 2022	QUALITY-PROVIDER S.A.QUALITY-PROVIDER S.A. was fined EUR 20,000 by the AEPD for processing personal data without a valid legal basis and for failing to comply with data deletion requests. The violations concerned Articles 6 and 17 of the GDPR.	ES	AEPD	GDPR	€20,000	↗
22 Oct 2013	CIVESA 2005 SERVICIOS S LCIVESA 2005 SERVICIOS S L was fined EUR 600 by the AEPD for sending commercial emails to a user who had previously opted out. The authority found a breach of Article 21 of the LSSI.	ES	AEPD	ePrivacy	€600	↗
20 Aug 2025	MOBILITY EVOLUTION S.A.MOBILITY EVOLUTION S.A. was fined EUR 15,000 by the AEPD for failing to properly process data deletion requests submitted through its application. The authority found that the company’s handling of these requests breached Article 25 GDPR on data protection by design and by default.	ES	AEPD	GDPR	€15,000	↗
28 Feb 2017	DALMORRIS, S.L.DALMORRIS, S.L. was fined EUR 600 by the AEPD for sending unsolicited commercial emails. The conduct breached Article 21.1 of the LSSI, which restricts this type of communication without prior consent.	ES	AEPD	ePrivacy	€600	↗
17 Oct 2024	OK MOBILITY ESPAÑA, S.L.OK MOBILITY ESPAÑA, S.L. was fined by the AEPD in the amount of 100,000 EUR for failing to respond to a data access request. The authority cited breaches of GDPR Articles 5(1)(e), 13, and 15.	ES	AEPD	GDPR	€100,000	↗
20 May 2022	SERVICIOS PROFESIONALES LA PARADA S.L.The entity installed a video surveillance system that recorded public areas without informing the affected individuals. This breached data protection rules and led to a fine imposed by the AEPD.	ES	AEPD	GDPR	€800	↗
07 Sept 2021	***EMPRESA.1The entity was fined for failing to display visible signage informing individuals about video surveillance. The authority considered this a breach of Article 13 of the GDPR.	ES	AEPD	GDPR	€1,500	↗
23 Mar 2021	KUTXABANK, S.A.KUTXABANK, S.A. was fined EUR 100,000 by the AEPD for failing to properly handle a data deletion request. The issue affected the complainant’s ability to open a new account.	ES	AEPD	GDPR	€100,000	↗
29 Jan 2020	B.B.B.The AEPD fined B.B.B. EUR 2,000 for using a phone number for a purpose other than the one for which it was originally collected. The authority found this to be a breach of the GDPR principle of purpose limitation.	ES	AEPD	GDPR	€2,000	↗
24 Jun 2021	BAZTANDIS, S.L.BAZTANDIS, S.L. was fined EUR 1,000 by the AEPD for deficiencies in signage related to video surveillance. The authority found a breach of Article 13 GDPR concerning the information duties owed to individuals under surveillance.	ES	AEPD	GDPR	€1,000	↗
24 Mar 2023	COMUNIDAD DE PROPIETARIOS ***DIRECCIÓN.1The homeowners’ association was fined 500 EUR by the AEPD for installing surveillance cameras aimed at public areas without prior administrative authorization. The authority treated this as a breach of data protection rules.	ES	AEPD	GDPR	€500	↗
06 Sept 2022	MAE WEST SYSTEMS, S.L.MAE WEST SYSTEMS, S.L. was fined EUR 400 by the AEPD for failing to provide the required information on video surveillance signs. The authority found a breach of Article 13 GDPR because individuals under surveillance were not properly informed.	ES	AEPD	GDPR	€400	↗

Fine Tracker.