Website operator – €1,800 Fine (Spain, 2022)
A website operator was fined €1,800 for processing visitor data without consent and lacking a privacy policy. This ruling stresses that website operators must clearly communicate how they use visitor data and obtain consent before tracking.
What happened
The website operator processed visitor data without explicit consent and failed to provide a privacy policy.
Who was affected
Visitors to the website whose data was processed without their consent were affected.
What the authority found
The Spanish Data Protection Authority found that the website operator violated GDPR by not obtaining consent and lacking necessary information about data processing.
Why this matters
This case serves as a reminder for website operators to ensure they have clear consent mechanisms and privacy policies in place to protect user data.
GDPR Articles Cited
View original scraped data
Original data from scraper before AI verification against source document.
National Law Articles
The Spanish DPA (AEPD) has imposed a fine on the operator of the website link During its investigation, the DPA found numerous deficiencies on a website operated by the controller. For example, the controller processed data from visitors to the website without their explicit consent. In addition, the website did not contain any type of privacy policy. The DPA therefore found that the controller violated its duties set out in Art. 13 GDPR. Furthermore, the DPA found deficiencies in cookie use. The original fine of EUR 3,000 was reduced to EUR 1,800 due to immediate payment and acknowledgement of guilt.
Violations (3)
Non-essential cookies (tracking, advertising) are placed on the user's device before obtaining valid consent.
Art. 6(1) GDPR
The cookie banner or cookie policy provides vague, incomplete, or unclear information about what cookies are used and why.
Art. 12, 13 GDPR
The cookie banner uses misleading language to trick or pressure users into accepting cookies (dark patterns).
Art. 7 GDPR
Related Enforcement Actions (7)
Other enforcement actions involving Website operator in ES
Fine
€2K
Similar Cases
Enforcement actions with similar violations
Details
Fine Date
18 April 2022
Authority
Agencia Española de Protección de Datos
Fine Amount
€1,800
Enforcement Tracker ID
ETid-1135
About this data
Cite as: Cookie Fines. Website operator - Spain (2022). Retrieved from cookiefines.eu
Last updated: