Fine Tracker — Compliwatch

Imposed	Company	Country	Authority	Type	Amount	↗
28 Nov 2021	INCOPROSOL, S.L.INCOPROSOL, S.L. was fined EUR 5,000 by the AEPD for recording a customer's phone conversation without informing them. The authority treated this as a breach of data protection principles.	ES	AEPD	GDPR	€5,000	↗
03 Mar 2020	SANGIL Y GARCÍA, S.L.SANGIL Y GARCÍA, S.L. was fined by the AEPD 1,800 EUR for sending promotional emails using personal data obtained from the Boletín Oficial de la Propiedad Industrial. The company had no prior client relationship with the recipients, which breached data protection rules.	ES	AEPD	ePrivacy	€1,800	↗
01 Jan 2020	GOOGLE LLCGoogle LLC was fined by the AEPD EUR 5,000,000 for the unauthorized communication of personal data to the “Lumen Project”. The authority found breaches of the right to erasure and the GDPR requirement for lawful processing.	ES	AEPD	GDPR	€5,000,000	↗
03 Oct 2024	ALL IN DIGITAL MARKETING SLALL IN DIGITAL MARKETING SL was fined EUR 5,000 by the AEPD for continuing to send marketing emails despite the recipient's unsubscribe requests. The authority found a breach of Article 21 of the LSSI.	ES	AEPD	ePrivacy	€5,000	↗
16 Jan 2022	B.B.B.The online pet store mascotagadget.com was fined EUR 500 by the AEPD. The authority found that customer data was transferred to third parties without consent and that users were not properly informed, breaching Article 13 of the GDPR.	ES	AEPD	GDPR	€500	↗
14 Jun 2017	DALMORRIS, S.L.DALMORRIS, S.L. was fined by the AEPD in the amount of 600 EUR for sending an unsolicited commercial email. The conduct breached Article 21.1 of the LSSI, which prohibits unwanted marketing communications.	ES	AEPD	ePrivacy	€600	↗
03 Feb 2017	CAIXABANK, S.A.CAIXABANK, S.A. was fined by the AEPD EUR 2,500 for sending a customer an unsolicited advertising SMS. The recipient had not consented to receive commercial communications, which breached Article 21.1 of the LSSI.	ES	AEPD	ePrivacy	€2,500	↗
30 Mar 2025	MODEL REYNA, C.B.MODEL REYNA, C.B. was fined by the AEPD EUR 3,000 for failing to provide access to personal data and related information. The authority found a breach of Article 58.1 of the GDPR.	ES	AEPD	GDPR	€3,000	↗
29 Jul 2015	LEIPZIG COMUNICACIONES, S.L.LEIPZIG COMUNICACIONES, S.L. was fined by the AEPD for sending six unsolicited advertising SMS messages without prior consent. The authority also found that no opt-out mechanism was provided, which breached Article 21 of the LSSI.	ES	AEPD	ePrivacy	€3,000	↗
02 Oct 2023	AVENTURA EN TRAMPOLINES, S.L.Aventura en Trampolines, S.L. was fined by the AEPD EUR 2,000 for breaching GDPR Article 7. The company required consent for image use without allowing users to refuse specific terms, which did not meet data protection requirements.	ES	AEPD	GDPR	€2,000	↗
12 Jul 2021	A.A.A.The entity was fined for processing personal data through a video surveillance system without appropriate security measures and without the required informational signage. The authority found a breach of Article 13 GDPR.	ES	AEPD	GDPR	€1,000	↗
18 Nov 2019	EUSKALTEL, S.A.EUSKALTEL, S.A. was fined by the AEPD 50,000 EUR for a data protection incident. Due to incorrect handling of customer information, personal data was sent to the wrong individuals.	ES	AEPD	GDPR	€50,000	↗
27 Jan 2021	Vodafone España, S.A.U.Vodafone España, S.A.U. was fined by the AEPD 100,000 EUR for making a commercial call to a number registered on the Robinson list. The authority found that this breached data protection and direct marketing opt-out requirements.	ES	AEPD	GDPR	€100,000	↗
08 Jun 2021	BAR DA VINCI (SHUANGFENG ZHOU)BAR DA VINCI (SHUANGFENG ZHOU) was fined 500 EUR by the AEPD for operating a surveillance system without proper signage. The authority also found that the system captured excessive footage of public areas, constituting a GDPR breach.	ES	AEPD	GDPR	€500	↗
11 Jan 2023	BBVABBVA was fined by the AEPD EUR 1,640,000 for multiple data protection violations. The case involved unauthorized payment operations and improper handling of personal data in credit information systems.	ES	AEPD	GDPR	€1,640,000	↗
11 Dec 2024	INSTITUTO RAIMON GAJA, S.L.INSTITUTO RAIMON GAJA, S.L. was fined by the AEPD 2,000 EUR for sending unsolicited commercial communications by email. The conduct breached Article 21.1 of the LSSI, despite the recipient’s request to stop receiving such messages.	ES	AEPD	ePrivacy	€2,000	↗
09 Feb 2022	BANCO BILBAO VIZCAYA ARGENTARIA, S.A.The bank was fined by the AEPD for unlawfully processing personal data and for failing to provide access to personal data requested by a former client. The case concerns non-compliance with data protection obligations.	ES	AEPD	GDPR	€140,000	↗
28 Aug 2023	VOX ESPAÑAVOX ESPAÑA was fined by the AEPD EUR 1,000 for failing to properly sign its surveillance cameras and for capturing an excessive area of public space. The authority found breaches of GDPR data minimisation and transparency obligations.	ES	AEPD	GDPR	€1,000	↗
20 Jun 2023	CARRETERAS Y ASFALTOS, S.L.The company installed surveillance cameras that recorded both image and audio without proper signage or informing employees. This breached data protection requirements.	ES	AEPD	GDPR	€3,000	↗
01 Sept 2020	Iweb Internet Learning, S.L.Iweb Internet Learning, S.L. was fined by the AEPD EUR 13,000 for failing to inform data subjects about the processing of their personal data. The authority also found the use of storage and retrieval devices without the required notice or consent.	ES	AEPD	ePrivacy	€13,000	↗

Fine Tracker.