Fine Tracker — Compliwatch

Imposed	Company	Country	Authority	Type	Amount	↗
15 Oct 2024	CARSO TRADING, S.L.CARSO TRADING, S.L. was fined by the AEPD in the amount of EUR 6,000 for failing to respond to a data access request. The authority found a breach of Article 15 of the GDPR and Article 58.2 of the GDPR.	ES	AEPD	GDPR	€6,000	↗
01 Jan 2019	EL PERIODICO DE CATALUNYA, S.L.EL PERIODICO DE CATALUNYA, S.L. was fined by the AEPD 10,000 EUR for sending a commercial email after a data deletion request. The authority found this conduct to be in breach of Article 6 of the GDPR.	ES	AEPD	GDPR	€10,000	↗
01 Jan 2012	EL CORTE INGLES, S.A.EL CORTE INGLES, S.A. was fined EUR 1,800 by the AEPD for sending commercial emails without providing a proper means to exercise the right to object. The case concerned non-compliance with the LSSI rules on marketing communications.	ES	AEPD	ePrivacy	€1,800	↗
26 Sept 2022	B.B.B.B.B.B. was fined EUR 300 by the AEPD for failing to provide adequate information about a video surveillance system. The camera captured a public area without proper notice to affected individuals, breaching Article 13 GDPR.	ES	AEPD	GDPR	€300	↗
01 Jan 2023	PUNTO ROJO LIBROS, S.L.PUNTO ROJO LIBROS, S.L. was fined by the AEPD 1,000 EUR for failing to adequately respond to a data subject’s request for information about the origin of their personal data. The authority treated this as a breach of GDPR obligations.	ES	AEPD	GDPR	€1,000	↗
06 Aug 2025	GOHIPOTECA, S.L.GOHIPOTECA, S.L. processed personal data without consent, using an individual's data to apply for a mortgage without authorization. The AEPD imposed a fine of EUR 2,000 for this violation.	ES	AEPD	GDPR	€2,000	↗
01 Jan 2018	IBERIA LÍNEAS AÉREAS DE ESPAÑA, S.A. OPERADORA UNIPERSONALThe AEPD fined Iberia 5,700 EUR for sending unsolicited commercial emails to a complainant. The company had previously confirmed the cancellation of the complainant’s personal data, yet it continued marketing communications, breaching Article 21.1 of the LSSI.	ES	AEPD	ePrivacy	€5,700	↗
01 Dec 2017	BILUA E-COMMERCE S.L (CARETHY y BIUKY)BILUA E-COMMERCE S.L. was fined by the AEPD EUR 7,000 for sending unsolicited commercial emails. The messages were sent despite the recipient's request to unsubscribe, which breached Article 21.1 of the LSSI.	ES	AEPD	ePrivacy	€7,000	↗
16 Jul 2023	ALBEN AIRPORT FACILITIES S.L.ALBEN AIRPORT FACILITIES S.L. was fined 500 EUR by the AEPD for failing to provide access to information required under Article 58.1 of the GDPR. This obstructed the data protection authority’s supervisory and investigative functions.	ES	AEPD	GDPR	€500	↗
25 Nov 2024	XFERA CONSUMER FINANCE ESTABLECIMIENTO FINANCIERO DE CRÉDITO, S.A.The AEPD fined XFERA Consumer Finance 5,000 EUR for sending a customer unsolicited advertising SMS messages. The messages were sent after the customer had asked to stop receiving such communications, indicating a breach of marketing communication rules.	ES	AEPD	ePrivacy	€5,000	↗
02 Jun 2014	BONANZA DIGITAL SERVICES, S.L.BONANZA DIGITAL SERVICES, S.L. was fined by the AEPD EUR 30,001 for sending unsolicited advertising SMS messages without the recipient’s consent. The company also failed to provide an opt-out mechanism, breaching the LSSI.	ES	AEPD	ePrivacy	€30,001	↗
12 Sept 2023	LEADDESK, S.L.LEADDESK, S.L. was fined by the AEPD for failing to provide access to information required under Article 58(1) of the GDPR. The conduct was treated as an obstruction of the data protection authority’s investigative functions.	ES	AEPD	GDPR	€4,000	↗
11 May 2022	VODAFONE ESPAÑA, S.A.U.VODAFONE ESPAÑA, S.A.U. was fined EUR 70,000 by the AEPD for issuing a duplicate SIM card without the customer's consent. This enabled unauthorized access to the customer's bank account, indicating a serious failure in security and data protection controls.	ES	AEPD	GDPR	€70,000	↗
13 Feb 2015	LA QUINIELA INTELIGENTE S.L.LA QUINIELA INTELIGENTE S.L. was fined by the AEPD EUR 2,600 for sending unsolicited commercial emails. The authority found that the messages did not provide recipients with an effective way to object to further communications, breaching Article 21 of the LSSI.	ES	AEPD	ePrivacy	€2,600	↗
07 Jul 2023	THE COMAKING SPACE, S.L.U.THE COMAKING SPACE, S.L.U. was fined by the AEPD EUR 2,000 for sending unsolicited commercial emails without recipient consent. The conduct breached the LSSI rules on electronic marketing communications.	ES	AEPD	ePrivacy	€2,000	↗
03 Jan 2017	EL CORTE INGLES, S.A.EL CORTE INGLES, S.A. was fined by the AEPD in the amount of EUR 5,700 for continuing to send marketing emails to a complainant despite requests to stop. The authority found a breach of Article 21.1 of the LSSI.	ES	AEPD	ePrivacy	€5,700	↗
27 Oct 2021	VENTANAS MAKE YOURSELF, S.L.The company was fined by the AEPD EUR 4,000 for not having a privacy policy and a cookie policy on its website. The breach concerned GDPR and LSSI requirements on information provided to users.	ES	AEPD	ePrivacy	€4,000	↗
04 Aug 2017	STAPLES PRODUCTOS DE OFICINA S.L.U.STAPLES PRODUCTOS DE OFICINA S.L.U. was fined EUR 2,000 by the AEPD for sending unsolicited commercial emails. The breach involved continuing to contact recipients despite requests to cancel consent.	ES	AEPD	ePrivacy	€2,000	↗
02 Nov 2010	VODAFONE ESPAÑA, S.A.Vodafone España, S.A. was fined 600 EUR by the AEPD for sending commercial communications to a complainant who had previously opted out. The authority found a breach of Article 21 of the LSSI.	ES	AEPD	ePrivacy	€600	↗
09 Sept 2022	COMUNIDAD DE PROPIETARIOS R.R.R.COMUNIDAD DE PROPIETARIOS R.R.R. was fined by the AEPD 2,000 EUR for unauthorized access to and dissemination of video surveillance recordings. The case concerns a breach of data protection rules.	ES	AEPD	GDPR	€2,000	↗

Fine Tracker.