UNIVERSIDAD A DISTANCIA DE MADRID, S.A. – €3,000 Fine (Spain, 2021)
General GDPR enforcement action
This case relates to broader data protection obligations, not specifically to cookie or consent banner compliance. It is not included in cookie statistics or the Risk Calculator.
The Spanish data protection authority fined a university for sending emails to a person who had asked for their data to be deleted. This case shows the importance of respecting people's requests to remove their data. Businesses should ensure they fully comply with data deletion requests.
What happened
The university sent promotional emails to a person after confirming their data had been deleted.
Who was affected
The affected individual was a person who requested the deletion of their data from the university's records.
What the authority found
The authority found that the university violated GDPR by not fully deleting the individual's data as requested, leading to unauthorized email marketing.
Why this matters
This case highlights the need for organizations to honor data deletion requests promptly and thoroughly. It serves as a reminder that failing to do so can result in fines and damage to reputation.
View original scraped data
Original imported citations before automated processing; the processing history does not establish independent verification.
Source checks
Linked-source text retrieved.
Review needed — 15 March 2026.
Processing notes: amount discrepancy.
Retrieved text may be a secondary summary or an announcement. These automated statuses do not establish that the original decision was read or that the record received an independent legal review. How we check sources
The Spanish DPA (AEPD) has imposed a fine on UNIVERSIDAD A DISTANCIA DE MADRID, S.A.. A data subject had filed a complaint against the distance learning university. He stated that he had requested the controller to delete all his data and prohibit its processing for any purpose. He received a confirmation, that his data had been completely deleted. Nevertheless, the data subject later received advertising from the controller by e-mail. The AEPD then imposed a fine of EUR 5,000, which was reduced to EUR 3,000 due to acknowledgement of guilt and immediate payment.
Violations (1)
The cookie banner uses misleading language to trick or pressure users into accepting cookies (dark patterns).
Art. 7 GDPR
Related Enforcement Actions (0)
No other enforcement actions found for UNIVERSIDAD A DISTANCIA DE MADRID, S.A. in ES
This is the only recorded action for this entity in this jurisdiction.
Similar Cases
Enforcement actions with similar violations
Details
Fine Date
29 July 2021
Authority
Agencia Española de Protección de Datos
Fine Amount
€3,000
Enforcement Tracker ID
ETid-779
About this data
Cite as: Cookie Fines. UNIVERSIDAD A DISTANCIA DE MADRID, S.A. - Spain (2021). Retrieved from cookiefines.eu
Last updated: