Cerrajero Online SL – €1,500 Fine (Spain, 2019)

€1,500Agencia Española de Protección de Datos6 November 2019Spain
final
Fine

General GDPR enforcement action

This case relates to broader data protection obligations, not specifically to cookie or consent banner compliance. It is not included in cookie statistics or the Risk Calculator.

Cerrajero Online SL was fined €1,500 for not updating its privacy policy to comply with GDPR. The policy still referred to outdated national laws, which misled users about their data rights. This case highlights the importance of keeping privacy policies current to avoid penalties.

What happened

Cerrajero Online SL used an outdated privacy policy that did not comply with GDPR requirements.

Who was affected

Customers and website visitors who relied on the company's privacy policy for information about data collection.

What the authority found

The AEPD found that the company's failure to update its privacy policy violated Article 13 of the GDPR.

Why this matters

This case underscores the necessity for businesses to regularly update their privacy policies to reflect current laws, ensuring transparency and compliance with GDPR. It serves as a reminder that even small oversights can lead to fines.

GDPR Articles Cited

Art. 13 GDPR
Art. 83(2)(e) GDPR

Entities Involved

Cerrajero Online SL
Consumer Institute of Madrid
Full Legal Summary
Detailed

The Consumer Institute of Madrid filed a complaint before the DPA with regard to the company's privacy policy which did not contain accurate information about how the company collects personal data and still refers to older national laws, instead of GDPR. Does an non-updated privacy policy infringe Article 13 GDPR? Shoud the AEPD calculate the fine by taking into account that the company was not previously subject to its decisions? The AEPD found that maintaining an old privacy policy violated Article 13 of the GDPR. The AEPD took into consideration the fact that the company did not have any previous relevant infringements according to Article 83(2)(e) GDPR for the calculation of the amount of the fine to be imposed. The case was settled over a payment of €1,500.

Related Enforcement Actions (0)

No other enforcement actions found for Cerrajero Online SL in ES

This is the only recorded action for this entity in this jurisdiction.

Details

Fine Date

6 November 2019

Authority

Agencia Española de Protección de Datos

Fine Amount

€1,500

GDPRhub ID

gdprhub-223

About this data

Data: GDPRhub (noyb.eu)
Licensed under CC BY-NC-SA 4.0
AI-verified and classified

Cite as: Cookie Fines. Cerrajero Online SL - Spain (2019). Retrieved from cookiefines.eu

Report Inaccuracy

Last updated: