Spain

CORON ISLAND SLU

1,600 €

GDPR enforcement action by Spanish Data Protection Authority (aepd) on 2022-05-31.

Rank · Sector

#68

of 100 in Accomodation and Hospitality

Rank · Spain

#745

of 1,075

Rank · All fines

#2,464

of 3,050

Case details

Authority: Spanish Data Protection Authority (aepd)
Date: 2022-05-31
Controller / Processor: CORON ISLAND SLU
Sector: Accomodation and Hospitality
Quoted Articles: Art. 5 (1) c) GDPR
Type of violation: Non-compliance with general data processing principles

Summary

The Spanish DPA has imposed a fine of EUR 1,600 on CORON ISLAND SLU. A customer had filed a complaint with the DPA against the restaurant. The customer had asked for a bill in her name after a meal. However, the manager explained that an invoice could only be issued if the customer provided her telephone number. The DPA considered this to be a violation of the principle of data minimization.

Open original source Links to the regulator's original publication or another source.