Fine Tracker — Compliwatch

Imposed	Company	Country	Authority	Type	Amount	↗
12 Feb 2021	KUKIMBIA S.L.KUKIMBIA S.L. was fined EUR 3,000 by the AEPD for leaving documents containing personal data unattended. The authority found this to be a breach of data security obligations under Article 32(1) of the GDPR.	ES	AEPD	GDPR	€3,000	↗
08 Oct 2010	A.A.A.A.A.A. was fined by the AEPD EUR 30,001 for sending unsolicited commercial emails. The case concerned continued email marketing despite a request to be removed from the mailing list, in breach of Article 21 of the LSSI.	ES	AEPD	ePrivacy	€30,001	↗
14 Aug 2022	INVERTIA TENERIFE 2019, S.L.INVERTIA TENERIFE 2019, S.L. was fined 2,000 EUR by the AEPD for failing to inform data subjects about the processing of their personal data. The authority treated this as a breach of Article 13 GDPR.	ES	AEPD	GDPR	€2,000	↗
01 Jan 2024	XFERA MÓVILES, S.A.U.XFERA MÓVILES, S.A.U. was fined by the AEPD for failing to ensure the security and confidentiality of personal data. The incident resulted in a data breach and created a risk of identity theft.	ES	AEPD	GDPR	€4,000,000	↗
09 Jun 2023	UNIÓN DE RADIOS LIBRES Y COMUNITARIAS DE MADRIDThe entity did not comply with a data protection authority resolution concerning the right to erasure. As a result, AEPD imposed a fine for breaching Article 58.2 of the GDPR.	ES	AEPD	GDPR	€1,000	↗
06 Apr 2011	VODAFONE ESPAÑA, S.A.VODAFONE ESPAÑA, S.A. was fined by the AEPD 30,001 EUR for continuing to send commercial emails and SMS messages to a complainant. The conduct continued despite requests to stop and objections to the processing of personal data for advertising purposes.	ES	AEPD	ePrivacy	€30,001	↗
23 Jul 2024	VOLTIUM CONSULTORES 2020, S.L.VOLTIUM CONSULTORES 2020, S.L. was fined by the AEPD in the amount of EUR 600 for failing to provide access to information under Article 58(1) of the GDPR. The case concerns a breach of cooperation and transparency obligations toward the supervisory authority.	ES	AEPD	GDPR	€600	↗
31 Jul 2024	CURENERGÍA COMERCIALIZADOR DE ÚLTIMO RECURSO, S.A.U.Curenergía was fined by the AEPD for processing personal data without a proper legal basis. The company used former customer data without full consent in connection with a new contract.	ES	AEPD	GDPR	€100,000	↗
01 Jan 2024	FLEXICAR IBÉRICA, S.L.FLEXICAR IBÉRICA, S.L. was fined €50,000 by the AEPD for a personal data breach. The incident occurred when information belonging to other clients was mistakenly shared via WhatsApp.	ES	AEPD	GDPR	€50,000	↗
21 Sept 2022	LISMARTSA, S.L.LISMARTSA, S.L. was fined EUR 1,200 by the AEPD for sending emails to multiple recipients without using BCC. This exposed personal email addresses and breached data protection and security requirements.	ES	AEPD	GDPR	€1,200	↗
04 Jan 2022	BEAUTY & AESTHETIC BALEARIC, SL.BEAUTY & AESTHETIC BALEARIC, SL. was fined by the AEPD €1,000 for sending marketing emails without an opt-out mechanism. The authority found this to be a breach of Article 21 of the LSSI.	ES	AEPD	ePrivacy	€1,000	↗
16 Mar 2023	B.B.B.B.B.B. was fined by the AEPD in the amount of EUR 300 for failing to provide adequate information about video surveillance. The authority found a breach of Article 13 GDPR because the affected individuals did not receive the required information.	ES	AEPD	GDPR	€300	↗
17 Mar 2021	GERCO FIT, S.L.GERCO FIT, S.L. was fined by the AEPD in the amount of 2,000 EUR for processing personal data without proper consent. The authority found a breach of Article 6 of the GDPR.	ES	AEPD	GDPR	€2,000	↗
04 Jul 2021	VODAFONE ESPAÑA, S.A.U.The AEPD fined VODAFONE ESPAÑA, S.A.U. EUR 70,000 for allowing a third party to contract phone numbers using another individual's identity. The case concerns a breach of data protection rules and inadequate identity verification.	ES	AEPD	GDPR	€70,000	↗
05 Oct 2016	RASTREATOR.COM LIMITED SUCURSAL EN ESPAÑARASTREATOR.COM LIMITED SUCURSAL EN ESPAÑA was fined by the AEPD €1,000 for sending unsolicited commercial emails. The authority found that the emails were sent despite the recipient’s request to opt out, which breached Article 21.1 of the LSSI.	ES	AEPD	ePrivacy	€1,000	↗
18 May 2012	INATED S.L.INATED S.L. was fined by the AEPD EUR 600 for sending unsolicited commercial communications by email. This conduct breached Article 21.1 of the LSSI, which prohibits such messages without prior recipient consent.	ES	AEPD	ePrivacy	€600	↗
06 Jun 2021	FLY FUT, S.L.FLY FUT, S.L. was fined by the AEPD in the amount of 3,000 EUR for recording a minor during football matches without prior consent. The case concerns a breach of data protection rules and the requirement to obtain consent before processing a child’s image.	ES	AEPD	GDPR	€3,000	↗
29 May 2023	SERVICIOS E INTERVENCIONES EN EDIFICACION DEL MEDITERRÁNEO, S.L.The company published an image on its website without the individual's express consent. The authority treated the case as a repeat infringement because the company had previously been sanctioned for the same conduct.	ES	AEPD	GDPR	€2,000	↗
22 May 2014	COMERCIAL POLINDUS 21, S.L.COMERCIAL POLINDUS 21, S.L. was fined by the AEPD 9,000 EUR for sending unsolicited commercial SMS messages. The authority found that recipients were not given an opt-out option, which breached Article 21 of the LSSI.	ES	AEPD	ePrivacy	€9,000	↗
01 Jan 2019	EDP ENERGÍA, S.A.U.EDP ENERGÍA, S.A.U. was fined by the AEPD EUR 75,000 for processing personal data without consent. The case concerned an energy contract to which the complainant was not a party, constituting a breach of Article 6(1) GDPR.	ES	AEPD	GDPR	€75,000	↗

Fine Tracker.