Spain

CAMERDATA, S.A.

260,000 €

GDPR enforcement action by Spanish Data Protection Authority (aepd) on 2025-04-15.

Rank · Sector

#75

of 369 in Media, Telecoms and Broadcasting

Rank · Spain

#51

of 1,075

Rank · All fines

#316

of 3,050

Case details

Authority: Spanish Data Protection Authority (aepd)
Date: 2025-04-15
Controller / Processor: CAMERDATA, S.A.
Sector: Media, Telecoms and Broadcasting
Quoted Articles: Art. 6 (1) GDPR, Art. 14 GDPR
Type of violation: Insufficient legal basis for data processing

Summary

The Spanish DPA has imposed a fine of EUR 260,000 on CAMERDATA, S.A. The controller operates a database in which it collects data on individual entrepreneurs from the Spanish Chamber of Commerce, Industry, Services and Navigation, with the purpose of selling this to third parties. The DPA found that there was no sufficient legal basis for the processing carried out by the controller. The controller also failed to inform the data subjects about the processing.

Open original source Links to the regulator's original publication or another source.