Spain

ORNITOLÓGICA DE ANDALUCÍA FOA

900 €

GDPR enforcement action by Spanish Data Protection Authority (aepd) on 2026-03-02.

Rank · Sector

#197

of 351 in Individuals and Private Associations

Rank · Spain

#872

of 1,075

Rank · All fines

#2,742

of 3,050

Case details

Authority: Spanish Data Protection Authority (aepd)
Date: 2026-03-02
Controller / Processor: ORNITOLÓGICA DE ANDALUCÍA FOA
Sector: Individuals and Private Associations
Quoted Articles: Art. 5 (1) f) GDPR
Type of violation: Non-compliance with general data processing principles

Summary

The Spanish DPA has imposed a fine of EUR 900 on ORNITOLÓGICA DE ANDALUCÍA FOA. The controller sent a mass email to more than 200 affiliated recipients. The email disclosed personal data that was not necessary for the intended purpose, due to insufficient technical and organisational measures. The original fine of EUR 1,500 was reduced to EUR 900 due to immediate payment and admission of responsibility by the controller.

Open original source Links to the regulator's original publication or another source.