Spain

MAD COOL FESTIVAL S.L.

3,500 €

GDPR enforcement action by Spanish Data Protection Authority (aepd) on 2025-03-30.

Rank · Sector

#343

of 597 in Industry and Commerce

Rank · Spain

#589

of 1,075

Rank · All fines

#1,974

of 3,050

Case details

Authority: Spanish Data Protection Authority (aepd)
Date: 2025-03-30
Controller / Processor: MAD COOL FESTIVAL S.L.
Sector: Industry and Commerce
Quoted Articles: Art. 5 (1) f) GDPR, Art. 32 GDPR
Type of violation: Insufficient technical and organisational measures to ensure information security

Summary

The Spanish DPA (AEPD) has imposed a fine of EUR 3,500 on MAD COOL FESTIVAL S.L. The controller suffered a data breach due to insufficient technical and organizational measures. The total fine consists of a fine of EUR 2,000 for infringing on Art. 5(1)(f) GDPR, and EUR 1,500 for the violation of Art. 32 GDPR. The total sum can be reduced by 20% (resulting in a fine of EUR 2,800) with timely payment.

Open original source Links to the regulator's original publication or another source.