Spain

CREMA GAMES, S.L.

4,000 €

GDPR enforcement action by Spanish Data Protection Authority (aepd) on 2025-03-28.

Rank · Sector

#335

of 369 in Media, Telecoms and Broadcasting

Rank · Spain

#576

of 1,075

Rank · All fines

#1,938

of 3,050

Case details

Authority: Spanish Data Protection Authority (aepd)
Date: 2025-03-28
Controller / Processor: CREMA GAMES, S.L.
Sector: Media, Telecoms and Broadcasting
Quoted Articles: Art. 15 GDPR
Type of violation: Insufficient fulfilment of information obligations

Summary

The Spanish DPA imposed a fine on CREMA GAMES, S.L. The controller failed to fulfill an information request from an online customer. The controller asked the data subject for an identity document, but the data subject did not provide one. As a result, the controller refused to fulfill the information request. According to the DPA, the controller should have used a digital authentication method. The original fine of EUR 5,000 was reduced to EUR 4,000 due to immediate payment without admission of responsibility by the controller.

Open original source Links to the regulator's original publication or another source.