Spain

LARDIANA, S.L.

2,000 €

GDPR enforcement action by Spanish Data Protection Authority (aepd) on 2026-09-14.

Rank · Sector

#65

of 105 in Accomodation and Hospitality

Rank · Spain

#761

of 1,121

Rank · All fines

#2,575

of 3,230

Case details

Authority: Spanish Data Protection Authority (aepd)
Date: 2026-09-14
Controller / Processor: LARDIANA, S.L.
Sector: Accomodation and Hospitality
Quoted Articles: Art. 6 (1) GDPR
Type of violation: Insufficient legal basis for data processing

Summary

The Spanish DPA has imposed a fine of EUR 2,000 on LARDIANA, S.L. The controller operates hotels. The phone number of an employee was published as the hotel's contact information on a booking site, even after their employment had ended. On 7 April 2023, the controller's management informed the data subject that their phone number was being used on the website. On 10 April 2025, the data subject stated that their phone number should not be published on the website. However, the controller still published the phone number and did not respond to the AEPD's letters regarding the matter.

Open original source Links to the regulator's original publication or another source.