Store owner
300 €
GDPR enforcement action by Spanish Data Protection Authority (aepd) on 2022-05-10.
Rank · Sector
#586
of 597 in Industry and Commerce
Rank · Spain
#994
of 1,075
Rank · All fines
#2,939
of 3,050
Case details
- Authority
- Spanish Data Protection Authority (aepd)
- Date
- 2022-05-10
- Controller / Processor
- Store owner
- Sector
- Industry and Commerce
- Quoted Articles
- Art. 13 GDPR
- Type of violation
- Insufficient fulfilment of information obligations
Summary
The Spanish DPA (AEPD) has imposed a fine of EUR 300 on a store owner. The controller had requested various personal data from customers for appointment bookings. The DPA found that the controller failed to properly inform the data subjects about the processing of the data in accordance with Art. 13 GDPR.
Open original source
Links to the regulator's original publication or another source.
Related fines
Spain
2025-04-07
14,400,000 €
ETid-3192
AMADEUS IT GROUP, S.A.
Transportation and Energy
Spain
2025-11-06
10,043,002 €
ETid-2962
Aena, S.M.E., S.A.
Transportation and Energy
Spain
2022-05-18
10,000,000 €
ETid-1176
Google LLC
Media, Telecoms and Broadcasting
Spain
2021-03-11
8,150,000 €
ETid-594
Vodafone España, S.A.U.
Media, Telecoms and Broadcasting
Spain
2023-12-27
6,500,000 €
ETid-2532
THE PHONE HOUSE SPAIN, S.L.
Media, Telecoms and Broadcasting
Spain
2023-10-25
6,100,000 €
ETid-2220
ENDESA ENERGÍA, S.A.U.
Transportation and Energy