- Enforcing jurisdiction
- Spain · Geography does not establish applicable law.
- Confirmed applicable legislation
- Privacy topics
BANCO CETELEM, S.A. – €150,000 Fine (Spain, 2024)
Privacy enforcement record
This record is classified outside cookie consent. Subject classification does not confirm an applicable law. It is not included in cookie statistics or the Risk Calculator.
BANCO CETELEM, S.A. was fined €150,000 for making unauthorized debits from a person's account without a contractual relationship. The Spanish authority found that the bank continued to process the person's data despite requests for deletion. This case highlights the need for companies to respect user consent and data rights.
What happened
BANCO CETELEM, S.A. debited funds from a person's account without their consent or a contract.
Who was affected
A person whose account was debited by BANCO CETELEM without authorization.
What the authority found
The authority ruled that the bank violated GDPR by processing personal data without a legal basis and failing to honor deletion requests.
Why this matters
This case illustrates the critical importance of obtaining consent before processing personal data. Companies must ensure they have a valid legal basis for all data processing activities.
View original scraped data
Original imported citations before automated processing; the processing history does not establish independent verification.
Source checks
Linked-source text retrieved.
Automated check recorded — 6 March 2026.
Processing notes: articles corrected, national law identified.
Retrieved text may be a secondary summary or an announcement. These automated statuses do not establish that the original decision was read or that the record received an independent legal review. How we check sources
The Spanish DPA has imposed a fine on BANCO CETELEM, S.A.. A person had filed a complaint against the controller with the DPA due to the fact that debits had been made from their account by the controller to a third party without there even being a contractual relationship between the data subject and the controller. The DPA also found that further debits were made despite complaints and requests for the data to be deleted. The original fine of EUR 250,000 was reduced to EUR 150,000 due to the voluntary payment and the acknowledgement of responsibility.
Related Enforcement Actions (0)
No other enforcement actions found for BANCO CETELEM, S.A. in ES
This is the only recorded action for this entity in this jurisdiction.
Details
Fine Date
25 June 2024
Authority
Agencia Española de Protección de Datos
Fine Amount
€150,000
About this data
Cite as: Cookie Fines. BANCO CETELEM, S.A. - Spain (2024). Retrieved from cookiefines.eu
Last updated: