CÍTRICOS TANTA, S.L. – €5,000 Fine (Spain, 2022)
General GDPR enforcement action
This case relates to broader data protection obligations, not specifically to cookie or consent banner compliance. It is not included in cookie statistics or the Risk Calculator.
CÍTRICOS TANTA, S.L. was fined €5,000 for entering an employee's personal data into a register even though the employee never worked there. This matters because it shows companies must have a valid reason to process personal data and must act quickly to correct mistakes.
What happened
CÍTRICOS TANTA, S.L. entered an employee's data into a work register without them ever working there and failed to remove it promptly.
Who was affected
An employee whose personal data was wrongly entered into the Social Security General Employee Register.
What the authority found
The Spanish DPA found that CÍTRICOS TANTA, S.L. unlawfully processed personal data by not deleting it when there was no valid reason to keep it.
Why this matters
This case highlights the importance of having a valid reason to process personal data and the need to quickly correct errors. Businesses should ensure they have proper checks to avoid unnecessary data processing.
GDPR Articles Cited
The Spanish DPA has imposed a fine of EUR 5,000 on CÍTRICOS TANTA, S.L.. The controller had entered personal data of an employee in the Social Security General Employee Register without the employee ever having actually worked. For this reason, the controller would have been obliged to cancel the entry of the data subject in the register within 72 hours, which the controller failed to do. In the absence of the data subject's work performance, the controller no longer had a legal basis to upload the data to the register. Therefore, the DPA found that the failure to delete the data constituted an unlawful processing of the data subject's personal data.
Related Enforcement Actions (0)
No other enforcement actions found for CÍTRICOS TANTA, S.L. in ES
This is the only recorded action for this entity in this jurisdiction.
Details
Fine Date
2 November 2022
Authority
Agencia Española de Protección de Datos
Fine Amount
€5,000
Enforcement Tracker ID
ETid-1484
About this data
Cite as: Cookie Fines. CÍTRICOS TANTA, S.L. - Spain (2022). Retrieved from cookiefines.eu
Last updated: