Fine Tracker — Compliwatch

Imposed	Company	Country	Authority	Type	Amount	↗
10 Sept 2021	LODEJU, S.L.LODEJU, S.L. was fined EUR 3,000 by the AEPD for excessive video surveillance of public space without proper signage. The authority found a breach of GDPR Articles 5(1)(c) and 13.	ES	AEPD	GDPR	€3,000	↗
31 Aug 2025	RISING SUN CAR RENTAL S.L.RISING SUN CAR RENTAL S.L. was fined by the AEPD 6,000 EUR for using surveillance cameras that recorded images and sound without explicit consent or proper justification. The authority also found that the mandatory camera information signs were not displayed.	ES	AEPD	GDPR	€6,000	↗
11 Dec 2015	EAE INSTITUCION SUPERIOR DE FORMACION UNIVERSITARIA S.L.EAE INSTITUCION SUPERIOR DE FORMACION UNIVERSITARIA S.L. was fined by the AEPD EUR 3,000 for sending commercial emails without the required consent. The authority found this conduct breached Article 21.2 of the LSSI.	ES	AEPD	ePrivacy	€3,000	↗
01 Jan 2015	GEDESCO SERVICES SPAIN, S.A.GEDESCO SERVICES SPAIN, S.A. was fined EUR 7,000 by the AEPD for sending unsolicited commercial communications by email and SMS. This conduct breached Article 21 of the LSSI.	ES	AEPD	ePrivacy	€7,000	↗
01 Jan 2025	MALAGASUITE SHOWROOM, S.L.MALAGASUITE SHOWROOM, S.L. was fined by the AEPD 2,000 EUR for failing to inform guests about the processing of their personal data. The authority found a breach of Article 13 GDPR.	ES	AEPD	GDPR	€2,000	↗
05 Feb 2020	TELEFONICA MÓVILES ESPAÑA, S.A.U.TELEFONICA MÓVILES ESPAÑA, S.A.U. was fined by the AEPD 30,000 EUR for failing to comply with a resolution concerning the GDPR right of access. The case indicates non-implementation of an obligation set out in a prior supervisory authority decision.	ES	AEPD	GDPR	€30,000	↗
05 Sept 2011	TELYCO TELEINFORMATICA Y COMUNICACIONES SATELYCO TELEINFORMATICA Y COMUNICACIONES SA was fined 600 EUR by the AEPD. The case concerned sending unsolicited commercial communications by electronic means without proper consent, in breach of Article 21 of the LSSI.	ES	AEPD	ePrivacy	€600	↗
03 Feb 2021	MERCADONA S.A.MERCADONA S.A. was fined EUR 170,000 by the AEPD for failing to respond to a data access request within the required timeframe and for deleting security camera footage. The authority found that these actions breached GDPR obligations, including Articles 12 and 6.	ES	AEPD	GDPR	€170,000	↗
05 May 2022	LYCAMOBILE S.L.U.LYCAMOBILE S.L.U. was fined by the AEPD 56,000 EUR for processing personal data without consent. The case involved unauthorized phone number portability, which could create a risk of identity theft.	ES	AEPD	GDPR	€56,000	↗
01 Jan 2017	MAS MOVIL TELECOM 3.0 S.A.U. (actualmente XFERA MOVILES, S.A.)The entity was fined by the AEPD in the amount of 2,500 EUR for sending unsolicited marketing messages without providing an opt-out option. This conduct breached article 21.2 of the LSSI, which requires recipients to be able to refuse such communications.	ES	AEPD	ePrivacy	€2,500	↗
01 Jan 2023	B.B.B.The entity was fined by the AEPD 300 EUR for operating a surveillance camera that captured public areas without proper signage. This conduct breached data protection requirements.	ES	AEPD	GDPR	€300	↗
04 Apr 2022	B.B.B.B.B.B. was fined 1,000 EUR by the AEPD for failing to comply with Article 13 of the GDPR. The authority found that the privacy policy did not provide adequate information on data retention periods and transfers to third parties.	ES	AEPD	GDPR	€1,000	↗
16 Apr 2022	ORI, S.l.ORI, S.l. was fined by the AEPD 2,000 EUR for failing to provide a privacy policy on its website. Personal data was collected through multiple forms, which constituted a breach of data protection rules.	ES	AEPD	GDPR	€2,000	↗
12 Sept 2019	MALONEY'S SPORT BAR S.L.MALONEY'S SPORT BAR S.L. was fined by the AEPD in the amount of 6,000 EUR for operating a video surveillance system that monitored public spaces without proper justification. The authority found this practice to be in breach of data protection rules.	ES	AEPD	GDPR	€6,000	↗
04 Sept 2023	ASSOCIACIO OASIS CULTURALASSOCIACIO OASIS CULTURAL was fined by the AEPD EUR 10,000 for unlawful processing of personal data. The case concerned the publication on TikTok of a video showing minors performing dances with sexual connotations without a legal basis under Article 6(1) GDPR.	ES	AEPD	GDPR	€10,000	↗
08 Aug 2023	VODAFONE ESPAÑA, S.A.U.The AEPD fined VODAFONE ESPAÑA, S.A.U. 100,000 EUR for processing personal data without proper authorization. The case involved unsolicited marketing calls and messages sent to a complainant who had no commercial relationship with the company.	ES	AEPD	GDPR	€100,000	↗
14 May 2010	S.& L. SUBASTAS INTERNACIONALES SAS.& L. SUBASTAS INTERNACIONALES SA was fined by the AEPD in the amount of 1,200 EUR for sending unsolicited commercial emails without recipients’ consent. The conduct breached Article 21 of the LSSI on electronic marketing communications.	ES	AEPD	ePrivacy	€1,200	↗
01 Jan 2013	MISCOTA E-COMMERCE, S.L.MISCOTA E-COMMERCE, S.L. was fined by the AEPD 1,800 EUR for sending unsolicited advertising emails to a complainant. The emails continued despite requests to be removed from the mailing list.	ES	AEPD	ePrivacy	€1,800	↗
07 Feb 2020	SOLO EMBRAGUE, S.L.SOLO EMBRAGUE, S.L. was fined by the AEPD 3,000 EUR for failing to provide information about its privacy policy and for not obtaining consent for cookies on its website. The case concerns breaches of transparency obligations and consent requirements under data protection rules.	ES	AEPD	ePrivacy	€3,000	↗
01 Jan 2019	VODAFONE ESPAÑA, S.A.U.The AEPD fined Vodafone España, S.A.U. 30,000 EUR for changing a customer's phone plan and purchasing a mobile device without consent. The case concerns a breach of data protection rules and the absence of a valid legal basis for processing the customer's data.	ES	AEPD	GDPR	€30,000	↗

Fine Tracker.