Spain

Website operator

1,800 €

GDPR enforcement action by Spanish Data Protection Authority (aepd) on 2022-04-18.

Rank · Sector

#473

of 595 in Industry and Commerce

Rank · Spain

#726

of 1,071

Rank · All fines

#2,435

of 3,042

Case details

Authority: Spanish Data Protection Authority (aepd)
Date: 2022-04-18
Controller / Processor: Website operator
Sector: Industry and Commerce
Quoted Articles: Art. 6 (1) GDPR, Art. 13 GDPR, Art. 22 (2) LSSI
Type of violation: Insufficient fulfilment of information obligations

Summary

The Spanish DPA (AEPD) has imposed a fine on the operator of the website https://liasclothes.olistshops.com. During its investigation, the DPA found numerous deficiencies on a website operated by the controller.

For example, the controller processed data from visitors to the website without their explicit consent.

In addition, the website did not contain any type of privacy policy. The DPA therefore found that the controller violated its duties set out in Art. 13 GDPR.
Furthermore, the DPA found deficiencies in cookie use.

The original fine of EUR 3,000 was reduced to EUR 1,800 due to immediate payment and acknowledgement of guilt.

Open original source Links to the regulator's original publication or another source.