Spain

SEUR GEOPOST, S.L.

164,000 €

GDPR enforcement action by Spanish Data Protection Authority (aepd) on 2025-10-04.

Rank · Sector

#51

of 169 in Transportation and Energy

Rank · Spain

#81

of 1,076

Rank · All fines

#398

of 3,054

Case details

Authority: Spanish Data Protection Authority (aepd)
Date: 2025-10-04
Controller / Processor: SEUR GEOPOST, S.L.
Sector: Transportation and Energy
Quoted Articles: Art. 5 (1) f) GDPR, Art. 28 GDPR
Type of violation: Insufficient data processing agreement

Summary

The Spanish DPA has imposed a fine of EUR 164,000 on SEUR GEOPOST, S.L. The controller, a logistics company, used a third-party provider of parcel lockers for the receipt and return of packages to deliver a shipment to a data subject. The controller provided the provider with the data subject's personal contact details so that the provider could inform them about the delivery to the parcel locker and coordinate the collection of the package. The parcel locker provider therefore acted as a data processor for the controller. However, the controller failed to enter into a sufficient data processing agreement with the processor.. The original fine of EUR 205,000 was reduced to EUR 164,000 due to immediate payment by the controller.

Open original source Links to the regulator's original publication or another source.