- Enforcing jurisdiction
- Spain · Geography does not establish applicable law.
- Confirmed applicable legislation
- Privacy topics
Cerrajero Online SL – €1,500 Fine (Spain, 2019)
Privacy enforcement record
This record is classified outside cookie consent. Subject classification does not confirm an applicable law. It is not included in cookie statistics or the Risk Calculator.
Cerrajero Online SL was fined for not updating its privacy policy to comply with GDPR rules. The company used outdated information about how it collects personal data. This case shows the importance of keeping privacy policies current to avoid penalties.
What happened
The company was fined for maintaining an outdated privacy policy that did not comply with GDPR.
Who was affected
Consumers who interacted with Cerrajero Online SL and relied on its privacy policy.
What the authority found
The DPA found that the company violated Article 13 of GDPR by not providing accurate information in its privacy policy.
Why this matters
This fine emphasizes that businesses must regularly update their privacy policies to reflect current laws. Small businesses should ensure their policies are compliant to avoid fines.
View original scraped data
Original imported citations before automated processing; the processing history does not establish independent verification.
Entities Involved
Source checks
Linked-source text retrieved.
Automated check recorded — 16 March 2026.
Processing notes: articles corrected, national law identified.
Retrieved text may be a secondary summary or an announcement. These automated statuses do not establish that the original decision was read or that the record received an independent legal review. How we check sources
The Consumer Institute of Madrid filed a complaint before the DPA with regard to the company's privacy policy which did not contain accurate information about how the company collects personal data and still refers to older national laws, instead of GDPR. Does an non-updated privacy policy infringe Article 13 GDPR? Shoud the AEPD calculate the fine by taking into account that the company was not previously subject to its decisions? The AEPD found that maintaining an old privacy policy violated Article 13 of the GDPR. The AEPD took into consideration the fact that the company did not have any previous relevant infringements according to Article 83(2)(e) GDPR for the calculation of the amount of the fine to be imposed. The case was settled over a payment of €1,500.
Related Enforcement Actions (0)
No other enforcement actions found for Cerrajero Online SL in ES
This is the only recorded action for this entity in this jurisdiction.
Details
Fine Date
6 November 2019
Authority
Agencia Española de Protección de Datos
Fine Amount
€1,500
GDPRhub ID
gdprhub-223About this data
Cite as: Cookie Fines. Cerrajero Online SL - Spain (2019). Retrieved from cookiefines.eu
Last updated: