CUMACA MOTOR, S.L. – €6,000 Fine (Spain, 2026)
General GDPR enforcement action
This case relates to broader data protection obligations, not specifically to cookie or consent banner compliance. It is not included in cookie statistics or the Risk Calculator.
CUMACA MOTOR, S.L. was fined for requiring a customer to provide unnecessary personal identification for a vehicle repair. This case is significant because it shows that companies must only collect personal data that is truly needed for their services. Businesses should review their data collection practices to ensure compliance with privacy laws.
What happened
CUMACA MOTOR, S.L. required a customer to provide a national identity document for a vehicle repair, which was not necessary according to the insurance company.
Who was affected
A customer of CUMACA MOTOR, S.L. who was asked to provide unnecessary personal identification for a vehicle repair.
What the authority found
The Spanish DPA found that the company had no valid legal basis for collecting the identity document, violating GDPR's requirement for data minimization.
Why this matters
This ruling highlights the need for companies to limit data collection to what is necessary for their operations. It sets a precedent that could lead to stricter scrutiny of data collection practices in various industries.
GDPR Articles Cited
View original scraped data
Original data from scraper before AI verification against source document.
Insufficient legal basis for data processing
Related Enforcement Actions (0)
No other enforcement actions found for CUMACA MOTOR, S.L. in ES
This is the only recorded action for this entity in this jurisdiction.
Details
Fine Date
10 March 2026
Authority
Agencia Española de Protección de Datos
Fine Amount
€6,000
Enforcement Tracker ID
3128
About this data
Cite as: Cookie Fines. CUMACA MOTOR, S.L. - Spain (2026). Retrieved from cookiefines.eu
Last updated: