Website operator – €2,000 Fine (Spain, 2022)
General GDPR enforcement action
This case relates to broader data protection obligations, not specifically to cookie or consent banner compliance. It is not included in cookie statistics or the Risk Calculator.
A Spanish website operator was fined EUR 2,000 for placing cookies before getting user consent and providing unclear cookie information. This matters because it highlights the importance of transparency and consent in online data practices.
What happened
The website operator placed cookies on users' devices without first obtaining their consent and provided unclear information about the cookies.
Who was affected
Visitors to the website who had cookies placed on their devices without clear information or consent.
What the authority found
The Spanish data protection authority ruled that the website operator violated GDPR by not having a privacy policy and failing to inform users about cookies properly.
Why this matters
This case underscores the need for website operators to ensure clear communication about cookies and obtain user consent before placing them. It serves as a reminder to review and update cookie consent mechanisms to comply with GDPR.
GDPR Articles Cited
The Spanish DPA (AEPD) imposed a fine of EUR 2,000 on a website operator for the lack of a privacy policy on its website, in violation of Art. 13 GDPR.
Violations (3)
Non-essential cookies (tracking, advertising) are placed on the user's device before obtaining valid consent.
Art. 6(1) GDPR
The cookie banner or cookie policy provides vague, incomplete, or unclear information about what cookies are used and why.
Art. 12, 13 GDPR
The cookie banner uses misleading language to trick or pressure users into accepting cookies (dark patterns).
Art. 7 GDPR
Related Enforcement Actions (3)
Other enforcement actions involving Website operator in ES
Fine
€2K
Similar Cases
Enforcement actions with similar violations
Details
Fine Date
21 January 2022
Authority
Agencia Española de Protección de Datos
Fine Amount
€2,000
Enforcement Tracker ID
ETid-1007
About this data
Cite as: Cookie Fines. Website operator - Spain (2022). Retrieved from cookiefines.eu
Last updated: