Burwebs S.L. – €75,000 Fine (Spain, 2022)

€75,000Agencia Española de Protección de Datos3 November 2022Spain
final
Fine

General GDPR enforcement action

This case relates to broader data protection obligations, not specifically to cookie or consent banner compliance. It is not included in cookie statistics or the Risk Calculator.

The Spanish data protection authority fined Burwebs S.L. EUR 75,000 for mishandling user data on its adult content websites. The company kept personal data indefinitely, processed minors' data without parental consent, and made it hard for users to exercise their rights. This case highlights the importance of transparency and proper data handling practices.

What happened

Burwebs S.L. failed to handle user data transparently and retained it indefinitely without proper consent, especially for minors.

Who was affected

Users of Burwebs S.L.'s adult content websites, including minors whose data was processed without parental consent.

What the authority found

The Spanish DPA found that Burwebs violated GDPR by not being transparent about data processing and failing to obtain necessary consents.

Why this matters

This case underscores the need for companies to be transparent about data use and to ensure they have proper consents, especially when dealing with sensitive content or minors. It serves as a reminder for businesses to regularly update their privacy policies and data handling practices.

GDPR Articles Cited

Art. 13 GDPR
Art. 25 GDPR
Art. 5(1)(a) GDPR
Art. 12(2) GDPR
Art. 30(1) GDPR

National Law Articles

Art. 22 (2) LSSI
Full Legal Summary
Detailed

The Spanish DPA has fined Burwebs S.L. EUR 75,000. Burwebs operates websites with adult content. During its investigation, the DPA found that Burwebs did not process users' data transparently. In addition, Burwebs retained users' personal data for an indefinite period of time. Further, the DPA found that Burwebs processed the data of minor users without requiring any parental consent. Burwebs also complicated the exercise of data subjects' rights under the GDPR and had not sufficiently informed users about the processing as well as storage of their personal data in its privacy policy. Finally, the DPA found that Burwerbs' record of processing activities was not complete.

Related Enforcement Actions (0)

No other enforcement actions found for Burwebs S.L. in ES

This is the only recorded action for this entity in this jurisdiction.

Details

Fine Date

3 November 2022

Authority

Agencia Española de Protección de Datos

Fine Amount

€75,000

Enforcement Tracker ID

ETid-1801

About this data

Data: CMS GDPR Enforcement Tracker
Licensed under CC BY-NC-SA 4.0
AI-verified and classified

Cite as: Cookie Fines. Burwebs S.L. - Spain (2022). Retrieved from cookiefines.eu

Report Inaccuracy

Last updated: