EUROBOX S.A. – €6,000 Fine (Spain, 2024)
General GDPR enforcement action
This case relates to broader data protection obligations, not specifically to cookie or consent banner compliance. It is not included in cookie statistics or the Risk Calculator.
EUROBOX S.A. faced a fine for asking too much personal information from a customer to reactivate their account. The Spanish data protection authority found this excessive and unnecessary. This case shows that companies must limit the data they request from users.
What happened
EUROBOX S.A. required excessive documents from a customer to reactivate their blocked account.
Who was affected
A customer whose account was blocked and needed to provide unnecessary personal documents.
What the authority found
The DPA decided that EUROBOX S.A. violated the principle of data minimization by asking for too much information.
Why this matters
This ruling serves as a reminder for businesses to only ask for essential information from users. Companies should evaluate their data request processes to ensure they comply with privacy regulations.
View original scraped data
Original imported citations before automated processing; the processing history does not establish independent verification.
Source checks
Linked-source text retrieved.
Automated check recorded — 14 March 2026.
Processing notes: articles corrected, national law identified.
Retrieved text may be a secondary summary or an announcement. These automated statuses do not establish that the original decision was read or that the record received an independent legal review. How we check sources
The Spanish DPA has imposed a fine on EUROBOX S.A.. A person had filed a complaint with the DPA because, after having their account with the controller blocked, they were asked to submit various documents, such as proof of identity, address and financial situation, in order to reactivate it. During its investigation, the DPA found that this extensive data processing was not necessary and found it to be a violation against the principle of data minimisation. The original fine of EUR 10,000 was reduced to EUR 6,000 due to immediate payment and acknowledgement of responsibility.
Related Enforcement Actions (0)
No other enforcement actions found for EUROBOX S.A. in ES
This is the only recorded action for this entity in this jurisdiction.
Details
Fine Date
5 June 2024
Authority
Agencia Española de Protección de Datos
Fine Amount
€6,000
About this data
Cite as: Cookie Fines. EUROBOX S.A. - Spain (2024). Retrieved from cookiefines.eu
Last updated: