Spain

COFAMA XXI S.L.

1,200 €

GDPR enforcement action by Spanish Data Protection Authority (aepd) on 2026-08-03.

Rank · Sector

#536

of 636 in Industry and Commerce

Rank · Spain

#834

of 1,104

Rank · All fines

#2,711

of 3,197

Case details

Authority: Spanish Data Protection Authority (aepd)
Date: 2026-08-03
Controller / Processor: COFAMA XXI S.L.
Sector: Industry and Commerce
Quoted Articles: Art. 13 GDPR
Type of violation: Insufficient fulfilment of information obligations

Summary

The Spanish DPA has imposed a fine of EUR 1,200 on COFAMA XXI S.L. A customer who had experienced issues with a fuel hose at a petrol station wanted to obtain the relevant security camera footage. The data subject subsequently found that the signage informing data subjects about the recording referred to a repealed data protection law. Furthermore the sign did not name a controller and only provided a phone number as contact details. COFAMA stated that it was the controller and that it would change the signage. The request had not been answered because the data subject could not be identified or verified.

Open original source Links to the regulator's original publication or another source.