APOLLONIA TOPCO, S.L. – €30,000 Fine (Spain, 2023)
General GDPR enforcement action
This case relates to broader data protection obligations, not specifically to cookie or consent banner compliance. It is not included in cookie statistics or the Risk Calculator.
APOLLONIA TOPCO, S.L. was fined €30,000 because they asked a customer to provide their driving license to get a refund. The Spanish data protection authority found this unnecessary and too intrusive, as there were less invasive ways to verify identity. This case highlights the importance of only collecting necessary information from customers.
What happened
APOLLONIA TOPCO required a customer to submit their driving license for a refund.
Who was affected
The customer who sought a refund from APOLLONIA TOPCO was affected.
What the authority found
The authority ruled that the company violated the principle of data minimization by asking for unnecessary personal information.
Why this matters
This ruling emphasizes that businesses should limit the personal information they collect to what is strictly necessary. Companies should review their identity verification processes to avoid similar issues.
GDPR Articles Cited
The Spanish DPA has imposed a fine of EUR 30,000 on APOLLONIA TOPCO, S.L.. An individual had filed a complaint with the DPA due to the fact that, in order to receive a refund, they were required to send in their driving license as proof of identity. The DPA considered this to be a violation of the principle of data minimization, as the processing of the data on the driver's license was not necessary for the refund and the identity check could have been carried out with less intrusive means for the privacy of the data subject. In addition, the controller's data protection officer failed to properly respond to a request from the data subject.
Related Enforcement Actions (0)
No other enforcement actions found for APOLLONIA TOPCO, S.L. in ES
This is the only recorded action for this entity in this jurisdiction.
Details
Fine Date
2 November 2023
Authority
Agencia Española de Protección de Datos
Fine Amount
€30,000
Enforcement Tracker ID
ETid-2106
About this data
Cite as: Cookie Fines. APOLLONIA TOPCO, S.L. - Spain (2023). Retrieved from cookiefines.eu
Last updated: