Fine Tracker — Compliwatch

Imposed	Company	Country	Authority	Type	Amount	↗
23 Jul 2024	VOLTIUM CONSULTORES 2020, S.L.VOLTIUM CONSULTORES 2020, S.L. was fined by the AEPD in the amount of EUR 600 for failing to provide access to information under Article 58(1) of the GDPR. The case concerns a breach of cooperation and transparency obligations toward the supervisory authority.	ES	AEPD	GDPR	€600	↗
31 Jul 2024	CURENERGÍA COMERCIALIZADOR DE ÚLTIMO RECURSO, S.A.U.Curenergía was fined by the AEPD for processing personal data without a proper legal basis. The company used former customer data without full consent in connection with a new contract.	ES	AEPD	GDPR	€100,000	↗
01 Jan 2024	FLEXICAR IBÉRICA, S.L.FLEXICAR IBÉRICA, S.L. was fined €50,000 by the AEPD for a personal data breach. The incident occurred when information belonging to other clients was mistakenly shared via WhatsApp.	ES	AEPD	GDPR	€50,000	↗
21 Sept 2022	LISMARTSA, S.L.LISMARTSA, S.L. was fined EUR 1,200 by the AEPD for sending emails to multiple recipients without using BCC. This exposed personal email addresses and breached data protection and security requirements.	ES	AEPD	GDPR	€1,200	↗
04 Jan 2022	BEAUTY & AESTHETIC BALEARIC, SL.BEAUTY & AESTHETIC BALEARIC, SL. was fined by the AEPD €1,000 for sending marketing emails without an opt-out mechanism. The authority found this to be a breach of Article 21 of the LSSI.	ES	AEPD	ePrivacy	€1,000	↗
16 Mar 2023	B.B.B.B.B.B. was fined by the AEPD in the amount of EUR 300 for failing to provide adequate information about video surveillance. The authority found a breach of Article 13 GDPR because the affected individuals did not receive the required information.	ES	AEPD	GDPR	€300	↗
17 Mar 2021	GERCO FIT, S.L.GERCO FIT, S.L. was fined by the AEPD in the amount of 2,000 EUR for processing personal data without proper consent. The authority found a breach of Article 6 of the GDPR.	ES	AEPD	GDPR	€2,000	↗
04 Jul 2021	VODAFONE ESPAÑA, S.A.U.The AEPD fined VODAFONE ESPAÑA, S.A.U. EUR 70,000 for allowing a third party to contract phone numbers using another individual's identity. The case concerns a breach of data protection rules and inadequate identity verification.	ES	AEPD	GDPR	€70,000	↗
05 Oct 2016	RASTREATOR.COM LIMITED SUCURSAL EN ESPAÑARASTREATOR.COM LIMITED SUCURSAL EN ESPAÑA was fined by the AEPD €1,000 for sending unsolicited commercial emails. The authority found that the emails were sent despite the recipient’s request to opt out, which breached Article 21.1 of the LSSI.	ES	AEPD	ePrivacy	€1,000	↗
18 May 2012	INATED S.L.INATED S.L. was fined by the AEPD EUR 600 for sending unsolicited commercial communications by email. This conduct breached Article 21.1 of the LSSI, which prohibits such messages without prior recipient consent.	ES	AEPD	ePrivacy	€600	↗
06 Jun 2021	FLY FUT, S.L.FLY FUT, S.L. was fined by the AEPD in the amount of 3,000 EUR for recording a minor during football matches without prior consent. The case concerns a breach of data protection rules and the requirement to obtain consent before processing a child’s image.	ES	AEPD	GDPR	€3,000	↗
29 May 2023	SERVICIOS E INTERVENCIONES EN EDIFICACION DEL MEDITERRÁNEO, S.L.The company published an image on its website without the individual's express consent. The authority treated the case as a repeat infringement because the company had previously been sanctioned for the same conduct.	ES	AEPD	GDPR	€2,000	↗
22 May 2014	COMERCIAL POLINDUS 21, S.L.COMERCIAL POLINDUS 21, S.L. was fined by the AEPD 9,000 EUR for sending unsolicited commercial SMS messages. The authority found that recipients were not given an opt-out option, which breached Article 21 of the LSSI.	ES	AEPD	ePrivacy	€9,000	↗
01 Jan 2019	EDP ENERGÍA, S.A.U.EDP ENERGÍA, S.A.U. was fined by the AEPD EUR 75,000 for processing personal data without consent. The case concerned an energy contract to which the complainant was not a party, constituting a breach of Article 6(1) GDPR.	ES	AEPD	GDPR	€75,000	↗
01 Jan 2016	BANCO SANTANDER, S.A.Banco Santander, S.A. was fined by the AEPD €8,000 for sending unsolicited commercial emails. The authority found that the messages did not provide a valid email address for recipients to opt out, breaching Article 21 of the LSSI.	ES	AEPD	ePrivacy	€8,000	↗
18 Mar 2025	ALVEA SOLUCIONES TECNOLÓGICAS, S.L.ALVEA Soluciones Tecnológicas, S.L. was fined 35,000 EUR by the AEPD for improper handling of personal data. The authority cited sharing data without consent and failing to comply with data retention policies.	ES	AEPD	GDPR	€35,000	↗
25 Aug 2022	B.B.B.A lawyer sent personal data without authorization via WhatsApp for professional promotion. The AEPD found a breach of GDPR Articles 6 and 5(1)(f) and imposed a fine of 4,000 EUR.	ES	AEPD	GDPR	€4,000	↗
25 Oct 2016	CEPSA COMERCIAL PETROLEO, SAUCEPSA COMERCIAL PETROLEO, SAU was fined by the AEPD in the amount of 5,700 EUR. The sanction concerned the sending of unauthorized commercial emails in breach of Article 21.1 of the LSSI.	ES	AEPD	ePrivacy	€5,700	↗
28 Oct 2024	HSSERVICE LIZCON SOLUTIONS, S.L.HSSERVICE LIZCON SOLUTIONS, S.L. was fined by the AEPD for failing to comply with data protection rules. The authority cited non-compliance with measures required under Article 58(2) GDPR.	ES	AEPD	GDPR	€15,000	↗
18 Jul 2025	LEIVA BUS, S.L.LEIVA BUS, S.L. was fined by the AEPD 3,000 EUR for disclosing the personal data of a claimant and a third party in a damage assessment document. The case concerned a breach of data protection rules and unauthorized disclosure of information.	ES	AEPD	GDPR	€3,000	↗

Fine Tracker.