- Enforcing jurisdiction
- Spain · Geography does not establish applicable law.
- Confirmed applicable legislation
- Privacy topics
Vasco Andaluza de Inversiones S.L. – €2,000 Fine (Spain, 2021)
Privacy enforcement record
This record is classified outside cookie consent. Subject classification does not confirm an applicable law. It is not included in cookie statistics or the Risk Calculator.
Vasco Andaluza de Inversiones S.L. was fined €2,000 for sharing personal data without permission. This is significant because it shows that companies must stick to the agreements they make with customers about data sharing.
What happened
Vasco Andaluza de Inversiones S.L. shared personal data with other companies without the user's consent.
Who was affected
A customer who signed a contract with Fitness Place and expected their data to be shared only with Vasco Andaluza de Inversiones S.L.
What the authority found
The Spanish DPA found that the company violated GDPR's Article 6(1) by sharing data without a legal basis.
Why this matters
This case serves as a reminder that companies must respect user agreements and only share data as permitted to avoid legal issues.
View original scraped data
Original imported citations before automated processing; the processing history does not establish independent verification.
Source checks
Linked-source text retrieved.
Automated check recorded — 16 March 2026.
Processing notes: national law identified.
Retrieved text may be a secondary summary or an announcement. These automated statuses do not establish that the original decision was read or that the record received an independent legal review. How we check sources
The Spanish DPA (AEPD) has imposed a fine of EUR 2,000 on Vasco Andaluza de Inversiones S.L.. The data subject had signed a contract with the gym Fitness Place. In this contract, the data subject agreed that his data could be shared with the controller, the owner of Fitness Place sports centers. However, the company shared the data with Gerco Fit S.L. and Body Tonic Shop S.L., although this was not foreseen in the contract. Gerco Fit S.L. and Body Tonic Shop S.L. then processed the data without a legal basis.
Related Enforcement Actions (0)
No other enforcement actions found for Vasco Andaluza de Inversiones S.L. in ES
This is the only recorded action for this entity in this jurisdiction.
Details
Fine Date
27 July 2021
Authority
Agencia Española de Protección de Datos
Fine Amount
€2,000
Enforcement Tracker ID
ETid-795
About this data
Cite as: Cookie Fines. Vasco Andaluza de Inversiones S.L. - Spain (2021). Retrieved from cookiefines.eu
Last updated: