Vasco Andaluza de Inversiones S.L. – €2,000 Fine (Spain, 2021)

€2,000Agencia Española de Protección de Datos27 July 2021Spain
final
Fine

General GDPR enforcement action

This case relates to broader data protection obligations, not specifically to cookie or consent banner compliance. It is not included in cookie statistics or the Risk Calculator.

Vasco Andaluza de Inversiones S.L. was fined EUR 2,000 for sharing customer data with companies not mentioned in the original contract. This matters because it shows that businesses must respect data sharing agreements and only share information as agreed. Violating these terms can lead to penalties.

What happened

Vasco Andaluza de Inversiones S.L. shared customer data with companies not listed in the contract.

Who was affected

Customers of Fitness Place who had their data shared with Gerco Fit S.L. and Body Tonic Shop S.L.

What the authority found

The Spanish DPA found that Vasco Andaluza de Inversiones S.L. shared personal data without a valid legal basis, violating GDPR requirements.

Why this matters

This case highlights the importance of adhering to data sharing agreements and ensuring all parties involved are clearly identified. Businesses should review their contracts and data sharing practices to avoid similar fines.

GDPR Articles Cited

Art. 6(1) GDPR
Full Legal Summary
Detailed

The Spanish DPA (AEPD) has imposed a fine of EUR 2,000 on Vasco Andaluza de Inversiones S.L.. The data subject had signed a contract with the gym Fitness Place. In this contract, the data subject agreed that his data could be shared with the controller, the owner of Fitness Place sports centers. However, the company shared the data with Gerco Fit S.L. and Body Tonic Shop S.L., although this was not foreseen in the contract. Gerco Fit S.L. and Body Tonic Shop S.L. then processed the data without a legal basis.

Related Enforcement Actions (0)

No other enforcement actions found for Vasco Andaluza de Inversiones S.L. in ES

This is the only recorded action for this entity in this jurisdiction.

Details

Fine Date

27 July 2021

Authority

Agencia Española de Protección de Datos

Fine Amount

€2,000

Enforcement Tracker ID

ETid-795

About this data

Data: CMS GDPR Enforcement Tracker
Licensed under CC BY-NC-SA 4.0
AI-verified and classified

Cite as: Cookie Fines. Vasco Andaluza de Inversiones S.L. - Spain (2021). Retrieved from cookiefines.eu

Report Inaccuracy

Last updated: