Spain

REBOBINART, S.L.

2,000 €

GDPR enforcement action by Spanish Data Protection Authority (aepd) on 2026-08-27.

Rank · Sector

#195

of 221 in Employment

Rank · Spain

#760

of 1,121

Rank · All fines

#2,574

of 3,230

Case details

Authority: Spanish Data Protection Authority (aepd)
Date: 2026-08-27
Controller / Processor: REBOBINART, S.L.
Sector: Employment
Quoted Articles: Art. 13 GDPR
Type of violation: Insufficient fulfilment of information obligations

Summary

The Spanish DPA has imposed a fine of EUR 2,000 on REBOBINART, S.L. A data subject, employed by the controller, launched a complaint on 27 April 2025, stating that in the controllers office cameras were installed without adequate signage, the cameras covered areas used for breaks. The controllers manager reportedly used an app to watch a live feed of the cameras footage. Furthermore, the data subject was required to use their private WhatsApp account for their work. The controller stated, that the cameras were only used from 20:00 until 08:00 and only streamed the footage live, the room captured according to their statement was a meeting room. Signage that was submitted by the controller did not name the controller or an adress to exercise data subject rights, a labour inspectorate

Open original source Links to the regulator's original publication or another source.