Fine Tracker — Compliwatch

Imposed	Company	Country	Authority	Type	Amount	↗
31 Mar 2015	GRAMMATA, S.L.GRAMMATA, S.L. was fined by the AEPD 1,100 EUR for sending unsolicited advertising emails. The authority also found that the company failed to provide a functional opt-out mechanism, in breach of Article 21.1 of the LSSI.	ES	AEPD	ePrivacy	€1,100	↗
10 Oct 2023	GALENICUM HEALTH, S.L.U.GALENICUM HEALTH, S.L.U. was fined EUR 500 by the AEPD for failing to display informational signage about its video surveillance system. The authority found a breach of Article 5(1)(c) GDPR in relation to transparency and proper notice.	ES	AEPD	GDPR	€500	↗
29 Jan 2025	EDA TV CONSULTING, S.L.EDA TV CONSULTING, S.L. was fined by the AEPD 5,000 EUR for requiring a copy of the DNI when exercising data protection rights. The authority found this to breach the GDPR data minimization principle.	ES	AEPD	GDPR	€5,000	↗
12 Feb 2022	VODAFONE ESPAÑA, S.A.U.VODAFONE ESPAÑA, S.A.U. was fined 70,000 EUR by the AEPD for a data protection breach involving unauthorized SIM card duplication and an attempted line takeover. The authority found a violation of GDPR Article 6(1).	ES	AEPD	GDPR	€70,000	↗
13 Jan 2012	QUOTATIS ESPAÑA S.L.QUOTATIS ESPAÑA S.L. was fined by the AEPD 30,001 EUR for sending unsolicited commercial emails despite requests to stop. The case concerned Article 21.1 of the LSSI, which prohibits such communications without prior consent.	ES	AEPD	ePrivacy	€30,001	↗
21 Nov 2017	IBERIA LINEAS AEREAS DE ESPAÑA, S.A. OPERADORA, SOCIEDAD UNIPERSONALIberia was fined by the AEPD in the amount of 3,300 EUR for sending commercial emails without the recipient's consent. The authority found a breach of Article 21.1 of the LSSI on unsolicited electronic communications.	ES	AEPD	ePrivacy	€3,300	↗
23 Apr 2021	Vodafone España, S.A.U.Vodafone España, S.A.U. was fined EUR 70,000 by the AEPD after a third party gained unauthorized access to a customer account. The incident led to changes in personal data and services without the customer’s consent.	ES	AEPD	GDPR	€70,000	↗
04 Dec 2019	VODAFONE ESPAÑA, S.A.U.VODAFONE ESPAÑA, S.A.U. was fined EUR 5,000 by the AEPD for failing to provide requested information. The case concerned a breach of obligations under data protection rules.	ES	AEPD	GDPR	€5,000	↗
17 Jun 2024	FÚTBOL CLUB BARCELONAFútbol Club Barcelona was fined by the AEPD for processing biometric data without explicit consent during a mandatory member census update. The authority found breaches of GDPR Articles 9 and 35, relating to special-category data processing and data protection impact assessment requirements.	ES	AEPD	GDPR	€6,000,000	↗
16 Jun 2020	SCHOOL FITNESS HOLIDAY & FRANCHISING, S.L.U.SCHOOL FITNESS HOLIDAY & FRANCHISING, S.L.U. was fined by the AEPD 5,000 EUR for breaching the GDPR information obligations under Article 13. The case followed a complaint from the Madrid City Council's Consumer Unit.	ES	AEPD	GDPR	€5,000	↗
26 May 2010	MATCHLESS, S.L.MATCHLESS, S.L. was fined by the AEPD 30,001 EUR for sending unsolicited commercial emails without prior recipient consent. The authority also found that the company failed to provide a simple and free mechanism for recipients to object to further communications, in breach of Article 21 of the LSSI.	ES	AEPD	ePrivacy	€30,001	↗
29 Jan 2024	JAÉN, SENTIDO Y COMÚNThe entity was fined by the AEPD for failing to comply with a data protection authority resolution. The breach concerned sending emails to multiple recipients without using BCC, contrary to Article 58(2) GDPR.	ES	AEPD	GDPR	€1,000	↗
12 Jul 2021	B.B.B.B.B.B. was fined by the AEPD EUR 1,200 for operating a video surveillance system without proper signage. The case involved a breach of GDPR Article 13, and a new camera was installed despite prior warnings without correcting the deficiencies.	ES	AEPD	GDPR	€1,200	↗
11 Jun 2024	DIGITAL FLOW, S.L.DIGITAL FLOW, S.L. was fined EUR 2,000 by the AEPD for sending emails without an unsubscribe option. The authority also found that the company failed to provide a valid contact for exercising data deletion rights.	ES	AEPD	ePrivacy	€2,000	↗
01 Jan 2018	G.L. GISOFT ANÁLISIS Y DISEÑO, S.L.G.L. GISOFT ANÁLISIS Y DISEÑO, S.L. was fined 600 EUR by the AEPD. The case concerned the sending of unsolicited commercial emails, which breaches Article 21.1 of the LSSI.	ES	AEPD	ePrivacy	€600	↗
21 Oct 2010	Baldomero ** y Jesús * CBBaldomero y Jesús *** CB was fined by the AEPD EUR 30,001 for sending unsolicited commercial emails without prior consent from recipients. The authority found this conduct breached Article 21.1 of the LSSI.	ES	AEPD	ePrivacy	€30,001	↗
01 Jan 2022	DIGI SPAIN TELECOM, S.L.DIGI SPAIN TELECOM, S.L. was fined by the AEPD 70,000 EUR for unlawfully duplicating a customer's SIM card without consent. The incident led to unauthorized access to the customer's personal and banking data.	ES	AEPD	GDPR	€70,000	↗
20 May 2021	B.B.B.The entity did not provide the complainant with information about data processing or the ability to exercise rights after receiving a CV via WhatsApp in response to a job offer. AEPD imposed a fine of EUR 2,000 for breaching transparency obligations.	ES	AEPD	GDPR	€2,000	↗
06 Nov 2019	TODOTECNICOS24H S.L.TODOTECNICOS24H S.L. was fined by the AEPD EUR 1,500 for collecting personal data without providing the required information to the data subjects. The authority treated this as a breach of data protection rules.	ES	AEPD	GDPR	€1,500	↗
01 Jan 2015	TELENAUTO, S.A.TELENAUTO, S.A. was fined EUR 1,300 by the AEPD for sending unsolicited commercial SMS messages to a customer. The authority found a breach of the LSSI because prior consent was not obtained and no opt-out mechanism was provided.	ES	AEPD	ePrivacy	€1,300	↗

Fine Tracker.