Sfam España General s.l. – €5,000 Fine (Spain, 2021)
General GDPR enforcement action
This case relates to broader data protection obligations, not specifically to cookie or consent banner compliance. It is not included in cookie statistics or the Risk Calculator.
The Spanish DPA fined Sfam España General s.l. EUR 5,000 for charging a customer for services they didn't order. This case shows that companies must ensure they have a valid reason for processing personal data, like charging for services. Businesses should verify customer consent and service agreements to avoid similar fines.
What happened
The Spanish DPA fined Sfam España General s.l. for charging a customer for services they had not ordered.
Who was affected
A customer who was charged for services they did not order.
What the authority found
The DPA found that Sfam España General s.l. lacked a valid legal basis for processing the customer's data, violating GDPR.
Why this matters
This ruling highlights the necessity for businesses to confirm customer consent and service agreements before processing personal data. It serves as a reminder to ensure all charges are authorized to avoid penalties.
GDPR Articles Cited
The Spanish DPA (AEPD) has imposed a fine of EUR 5,000 on Sfam España General s.l.. A data subject had filed a complaint with the DPA against the controller for charging her several services that she had not ordered.
Related Enforcement Actions (0)
No other enforcement actions found for Sfam España General s.l. in ES
This is the only recorded action for this entity in this jurisdiction.
Details
Fine Date
22 December 2021
Authority
Agencia Española de Protección de Datos
Fine Amount
€5,000
Enforcement Tracker ID
ETid-966
About this data
Cite as: Cookie Fines. Sfam España General s.l. - Spain (2021). Retrieved from cookiefines.eu
Last updated: