ATRIUM LEX SFC – €100,000 Fine (Spain, 2024)

€100,000Agencia Española de Protección de Datos18 December 2024Spain
final
Fine

General GDPR enforcement action

This case relates to broader data protection obligations, not specifically to cookie or consent banner compliance. It is not included in cookie statistics or the Risk Calculator.

ATRIUM LEX SFC was fined €100,000 for not providing enough information when asking an investor for their ID card. This matters because it highlights the need for companies to be clear about how they handle personal data. Secure communication is vital to protect sensitive information.

What happened

ATRIUM LEX SFC requested a copy of an investor's ID card without giving sufficient information about the data processing.

Who was affected

An investor whose ID card was requested without proper information on data handling.

What the authority found

The Spanish DPA found that ATRIUM LEX SFC violated GDPR by not adequately informing the investor about the data processing and using insecure methods to collect ID cards.

Why this matters

This case underscores the importance of transparency in data processing. Companies must ensure they communicate clearly and securely with users when handling their personal information.

GDPR Articles Cited

AI-verified

Art. 13(GDPR)
Art. 32(1) GDPR
View original scraped data
Art. 13(GDPR)
Art. 32(1) GDPR

Original data from scraper before AI verification against source document.

Source verified 10 March 2026
national law identified
Full Legal Summary
Detailed

The Spanish DPA has imposed a fine of EUR 100,000 on the real estate management company ATRIUM LEX SFC. An investor had filed a complaint with the DPA because the controller had requested a copy of the investor's ID card to enable them to receive information about a project. The DPA found that the controller had not provided sufficient information about this data processing and that the sending of copies of ID cards by email was not sufficiently secure. The DPA assessed this as a violation of Art. 13 GDPR and Art. 32 (1) GDPR.

Related Enforcement Actions (0)

No other enforcement actions found for ATRIUM LEX SFC in ES

This is the only recorded action for this entity in this jurisdiction.

Details

Fine Date

18 December 2024

Authority

Agencia Española de Protección de Datos

Fine Amount

€100,000

Enforcement Tracker ID

ETid-2527

About this data

Data: CMS GDPR Enforcement Tracker
Licensed under CC BY-NC-SA 4.0
AI-verified and classified

Cite as: Cookie Fines. ATRIUM LEX SFC - Spain (2024). Retrieved from cookiefines.eu

Report Inaccuracy

Last updated: