Fine Tracker — Compliwatch

Imposed	Company	Country	Authority	Type	Amount	↗
18 Jul 2025	EUROPEAN ENERGY TRADE S.L.EUROPEAN ENERGY TRADE S.L. was fined 600 EUR by the AEPD. The company failed to provide access to data and information requested by the data protection authority, breaching Article 58.1 of the GDPR.	ES	AEPD	GDPR	€600	↗
09 Dec 2024	SOBLADA RESTAURACIÓN, S.L.SOBLADA RESTAURACIÓN, S.L. was fined by the AEPD EUR 4,500 for installing a video surveillance system without proper signage. The company also failed to inform employees about the system and its purposes, breaching GDPR Articles 5(1)(c) and 13.	ES	AEPD	GDPR	€4,500	↗
07 May 2014	TELEFÓNICA MÓVILES ESPAÑA, SAUTELEFÓNICA MÓVILES ESPAÑA, SAU was fined by the AEPD €1,200 for sending an unauthorized commercial SMS. The recipient was listed on the Robinson List, which constituted a breach of Article 21 of the LSSI.	ES	AEPD	ePrivacy	€1,200	↗
01 Jan 2019	TWITTER INTERNATIONAL COMPANY (TWITTER SPAIN, S.L.)Twitter International Company (Twitter Spain, S.L.) was fined EUR 30,000 by the AEPD. The authority found inadequate cookie information and the use of cookies without obtaining user consent, in breach of the LSSI.	ES	AEPD	ePrivacy	€30,000	↗
08 Feb 2023	VODAFONE SERVICIOS, S.L.U.VODAFONE SERVICIOS, S.L.U. was fined by the AEPD 70,000 EUR for a SIM card duplication incident. The incident resulted in identity theft and unauthorized access to a bank account, indicating a breach of data protection rules.	ES	AEPD	GDPR	€70,000	↗
23 Oct 2013	AUTOESCUELA XXXXXXAUTOESCUELA XXXXXX was fined by the AEPD for sending unsolicited commercial emails without providing a simple and free way to object. The authority found a breach of Article 21.2 of the LSSI.	ES	AEPD	ePrivacy	€600	↗
27 Jan 2021	STOCKHUNTERS, S.L.STOCKHUNTERS, S.L. was fined EUR 4,000 by the AEPD for failing to comply with GDPR Article 13. The authority found that the website privacy policy did not meet the required information standards.	ES	AEPD	GDPR	€4,000	↗
17 Mar 2021	VASCO ANDALUZA DE INVERSIONES, S.L.VASCO ANDALUZA DE INVERSIONES, S.L. was fined by the AEPD 2,000 EUR for unlawfully sharing personal data with third parties without informing the data subject. The authority found this conduct to be in breach of Article 6 of the GDPR.	ES	AEPD	GDPR	€2,000	↗
14 Sept 2018	IAHORRO BUSINESS SOLUTIONS SLIAHORRO BUSINESS SOLUTIONS SL was fined by the AEPD €1,000 for sending unsolicited commercial electronic communications. The company also failed to provide a procedure for exercising rights of access, rectification, cancellation, or objection.	ES	AEPD	ePrivacy	€1,000	↗
21 May 2024	BANCO CETELEM, S.A.Banco Cetelem, S.A. was fined by the AEPD 250,000 EUR for unauthorized processing of personal data. The case included charging the complainant’s bank account for a loan taken out by an unknown third party without consent.	ES	AEPD	GDPR	€250,000	↗
23 Mar 2021	ABANCA CORPORACIÓN BANCARIA, S.A.ABANCA CORPORACIÓN BANCARIA, S.A. was fined EUR 5,000 by the AEPD for using cookies on its website without providing the required information to users or obtaining their consent. The case concerns failures to meet legal notice and consent requirements.	ES	AEPD	ePrivacy	€5,000	↗
26 Sept 2022	ECOMM MOVADGENCY S.L.ECOMM MOVADGENCY S.L. was fined by the AEPD for sending commercial communications without the recipient’s consent. The company continued sending emails despite the recipient’s objection, which breached Article 21 GDPR.	ES	AEPD	GDPR	€1,000	↗
01 Jan 2022	GLOVOAPP23, S.L.GLOVOAPP23, S.L. was fined by the AEPD for processing a broad range of delivery riders’ personal data without adequate data protection measures. The authority found breaches of GDPR Articles 25 and 32, relating to privacy by design and processing security.	ES	AEPD	GDPR	€550,000	↗
01 Jan 2022	BANQUETES SANTA ANA, S.L.BANQUETES SANTA ANA, S.L. was fined EUR 5,000 by the AEPD for collecting personal data, including DNI numbers, from wedding guests without providing information about data processing. The authority found a breach of data minimization and transparency obligations.	ES	AEPD	GDPR	€5,000	↗
29 Apr 2021	CRIQUET PUBLICIDAD, S.L.CRIQUET PUBLICIDAD, S.L. was fined by the AEPD in the amount of 1,000 EUR for sending unsolicited commercial emails. The recipient’s address was registered on the Robinson List, which constitutes a breach of Article 21.1 of the LSSI.	ES	AEPD	ePrivacy	€1,000	↗
16 Jan 2020	VODAFONE ESPAÑA SAUVODAFONE ESPAÑA SAU was fined 120,000 EUR by the AEPD for unlawful processing of personal data. The case involved threatening to include a minor's data in a credit file over an alleged unpaid debt.	ES	AEPD	GDPR	€120,000	↗
23 Jan 2023	FRESHLY COSMETICS, S.L.FRESHLY COSMETICS, S.L. was fined EUR 5,000 by the AEPD for failing to provide a cookie notice on its website. The authority also found that non-essential cookies were used without prior user consent, in breach of Article 22.2 of the LSSI.	ES	AEPD	ePrivacy	€5,000	↗
23 Feb 2024	ENERGY WINNER, S.L.ENERGY WINNER, S.L. was fined EUR 600 by the AEPD. The case concerned the failure to provide access to personal data and information requested by the data protection authority, which constitutes a breach of Article 58.1 GDPR.	ES	AEPD	GDPR	€600	↗
23 May 2022	EL DIARIO DE PRENSA DIGITAL, S.L.EL DIARIO DE PRENSA DIGITAL, S.L. was fined by the AEPD 50,000 EUR for publishing audio of a victim's testimony in a high-profile court case. The authority found a breach of the GDPR data minimization principle.	ES	AEPD	GDPR	€50,000	↗
11 Jan 2024	DIGI SPAIN TELECOM, S.L.DIGI SPAIN TELECOM, S.L. was fined by the AEPD EUR 150,000 for processing personal data without proper authorization. The case involved a fraudulent contract created using the complainant’s identity, and the authority found that the company did not adequately verify the identity of the person entering into the contract.	ES	AEPD	GDPR	€150,000	↗

Fine Tracker.