Spain

ACVIL APARCAMIENTOS, S.L.U.

90,000 €

GDPR enforcement action by Spanish Data Protection Authority (aepd) on 2026-07-09.

Rank · Sector

#88

of 636 in Industry and Commerce

Rank · Spain

#124

of 1,104

Rank · All fines

#549

of 3,197

Case details

Authority: Spanish Data Protection Authority (aepd)
Date: 2026-07-09
Controller / Processor: ACVIL APARCAMIENTOS, S.L.U.
Sector: Industry and Commerce
Quoted Articles: Art. 15 GDPR, Art. 18 GDPR
Type of violation: Insufficient fulfilment of data subjects rights

Summary

The Spanish DPA has imposed a fine of EUR 90,000 on ACVIL APARCAMIENTOS, S.L.U. The controller is a parking garage operator. In February 2024 a lawyer requested that security camera footage of a collision involving their client's parked car not be deleted and be made available. In April 2024 after the one-month deadline had passed the controller replied that they only made recordings available to the police or a judge and that the relevant images had already been deleted. The authority found that the footage relevant to the incident should have been retained and that by deleting it the controller acted against the data subject's request for processing restriction. By responding after the relevant deadline the controller acted against the data subject's legitimate interests in identifying the person responsible for the collision.

Open original source Links to the regulator's original publication or another source.