Website operator – €1,000 Fine (Spain, 2023)
General GDPR enforcement action
This case relates to broader data protection obligations, not specifically to cookie or consent banner compliance. It is not included in cookie statistics or the Risk Calculator.
A website operator in Spain was fined EUR 1,000 for not following privacy rules. They failed to provide clear cookie information and allowed cookies to be placed before getting user consent. This case highlights the importance of having a transparent privacy policy and proper consent mechanisms on websites.
What happened
The Spanish DPA fined a website operator for not complying with privacy policy requirements.
Who was affected
Website visitors who encountered misleading cookie banners and unclear information were affected.
What the authority found
The authority found that the website operator did not meet the requirements of Article 13 of GDPR regarding user consent and cookie information.
Why this matters
This ruling emphasizes that website operators must ensure clear communication about cookies and obtain consent before tracking users. It serves as a reminder for all online businesses to review their privacy practices.
GDPR Articles Cited
View original scraped data
Original data from scraper before AI verification against source document.
The Spanish DPA has imposed a fine of EUR 1,000 on a website operator for failing to ensure that the privacy policy on its website complied with the requirements of Art. 13 GDPR.
Violations (4)
Cookie banner does not provide a clear reject/refuse all button at the same level as the accept button.
Art. 7 GDPR
Non-essential cookies (tracking, advertising) are placed on the user's device before obtaining valid consent.
Art. 6(1) GDPR
The cookie banner or cookie policy provides vague, incomplete, or unclear information about what cookies are used and why.
Art. 12, 13 GDPR
The cookie banner uses misleading language to trick or pressure users into accepting cookies (dark patterns).
Art. 7 GDPR
Related Enforcement Actions (7)
Other enforcement actions involving Website operator in ES
Fine
€1K
Similar Cases
Enforcement actions with similar violations
Details
Fine Date
26 April 2023
Authority
Agencia Española de Protección de Datos
Fine Amount
€1,000
Enforcement Tracker ID
ETid-1792
About this data
Cite as: Cookie Fines. Website operator - Spain (2023). Retrieved from cookiefines.eu
Last updated: