BANQUETES SANTA ANA, S.L. – €5,000 Fine (Spain, 2023)

€5,000Agencia Española de Protección de Datos3 May 2023Spain
final
Fine

General GDPR enforcement action

This case relates to broader data protection obligations, not specifically to cookie or consent banner compliance. It is not included in cookie statistics or the Risk Calculator.

BANQUETES SANTA ANA, S.L. was fined EUR 5,000 by the Spanish data protection authority for asking wedding couples to provide unnecessary personal data of their guests. The company requested ID card numbers for contact tracing, which was more information than needed. This case shows the importance of collecting only necessary data.

What happened

BANQUETES SANTA ANA, S.L. requested excessive personal data from wedding guests for Covid-19 contact tracing.

Who was affected

Wedding guests at BANQUETES SANTA ANA, S.L. who were asked to provide personal data like ID card numbers.

What the authority found

The authority determined that the request for extensive personal data was unnecessary for contact tracing, violating GDPR's data minimization principle.

Why this matters

The ruling reminds businesses to only collect the minimum data necessary for their purposes. This is especially important during health crises, where data collection must still respect privacy laws.

GDPR Articles Cited

Art. 5(1)(c) GDPR
Full Legal Summary
Detailed

The Spanish DPA has imposed a fine of EUR 5,000 on BANQUETES SANTA ANA, S.L.. The controller had asked a couple celebrating their wedding at its premises to provide the personal data of their guests, including ID card numbers, for the purpose of contact tracing in the context of the Covid-19 pandemic. The DPA determined that such a broad request for personal information was not necessary for contact tracing purposes and that the provision of the names, for example, would have been sufficient.

Related Enforcement Actions (0)

No other enforcement actions found for BANQUETES SANTA ANA, S.L. in ES

This is the only recorded action for this entity in this jurisdiction.

Details

Fine Date

3 May 2023

Authority

Agencia Española de Protección de Datos

Fine Amount

€5,000

Enforcement Tracker ID

ETid-1803

About this data

Data: CMS GDPR Enforcement Tracker
Licensed under CC BY-NC-SA 4.0
AI-verified and classified

Cite as: Cookie Fines. BANQUETES SANTA ANA, S.L. - Spain (2023). Retrieved from cookiefines.eu

Report Inaccuracy

Last updated: