Spain

Vueling Airlines

30,000 €

GDPR enforcement action by Spanish Data Protection Authority (aepd) on 2019-10-01.

Rank · Sector

#89

of 165 in Transportation and Energy

Rank · Spain

#291

of 1,071

Rank · All fines

#873

of 3,042

Case details

Authority: Spanish Data Protection Authority (aepd)
Date: 2019-10-01
Controller / Processor: Vueling Airlines
Sector: Transportation and Energy
Quoted Articles: Art. 5 GDPR, Art. 6 GDPR
Type of violation: Insufficient legal basis for data processing

Summary

The Spanish Data Protection Agency (AEPD) has sanctioned Vueling Airlines with 30,000 euros for not giving users the ability to refuse their cookies and force them to use them if they want to browse its website. In other words, it was not possible to browse the Vueling page without accepting their cookies. AEDP issued a sanctioning resolution for the amount of 30,000 euros, which could be reduced to 18,000 for immediate payment.

Open original source Links to the regulator's original publication or another source.