CUMACA MOTOR, S.L. – €6,000 Fine (Spain, 2026)
General GDPR enforcement action
This case relates to broader data protection obligations, not specifically to cookie or consent banner compliance. It is not included in cookie statistics or the Risk Calculator.
CUMACA MOTOR, S.L. was fined for requiring a customer to provide unnecessary personal identification for a vehicle repair. This case is significant because it shows that companies must only collect personal data that is truly needed for their services. Businesses should review their data collection practices to ensure compliance with privacy laws.
What happened
CUMACA MOTOR, S.L. required a customer to provide a national identity document for a vehicle repair, which was not necessary according to the insurance company.
Who was affected
A customer of CUMACA MOTOR, S.L. who was asked to provide unnecessary personal identification for a vehicle repair.
What the authority found
The Spanish DPA found that the company had no valid legal basis for collecting the identity document, violating GDPR's requirement for data minimization.
Why this matters
This ruling highlights the need for companies to limit data collection to what is necessary for their operations. It sets a precedent that could lead to stricter scrutiny of data collection practices in various industries.
GDPR Articles Cited
View original scraped data
Original data from scraper before AI verification against source document.
The Spanish DPA has imposed a fine of EUR 6,000 on CUMACA MOTOR, S.L. The controller required a data subject to provide a national identity document, which it copied for the purpose of a vehicle repair. The controller claimed that this was a requirement of the insurance company, which was paying for the repair. However, the insurance company did not require repair shops to check the identity documents of claimants, and the controller had no other legal basis for this processing. The original fine of EUR 7,500 was reduced to EUR 6,000 due to immediate payment by the controller.
Related Enforcement Actions (0)
No other enforcement actions found for CUMACA MOTOR, S.L. in ES
This is the only recorded action for this entity in this jurisdiction.
Details
Fine Date
10 March 2026
Authority
Agencia Española de Protección de Datos
Fine Amount
€6,000
Enforcement Tracker ID
ETid-1264
About this data
Cite as: Cookie Fines. CUMACA MOTOR, S.L. - Spain (2026). Retrieved from cookiefines.eu
Last updated: