Website operator – €180 Fine (Spain, 2024)
General GDPR enforcement action
This case relates to broader data protection obligations, not specifically to cookie or consent banner compliance. It is not included in cookie statistics or the Risk Calculator.
A website operator in Spain was fined for keeping user data longer than allowed. This matters because it shows the importance of deleting data when it's no longer needed, which protects users' privacy.
What happened
The Spanish DPA fined the website operator for storing user data for too long.
Who was affected
Website visitors whose data was kept longer than necessary were affected.
What the authority found
The authority found that the operator violated the storage limitation principle under GDPR.
Why this matters
This case highlights the need for businesses to regularly review their data retention policies. Companies should ensure they delete user data when it's no longer required.
GDPR Articles Cited
View original scraped data
Original data from scraper before AI verification against source document.
The Spanish DPA has imposed a fine on the operator of a website for storing data of a data subject for an excessively long period of time and contrary to the principle of storage limitation under Art. 5 (1) e) GDPR. The original fine of EUR 300 was reduced to EUR 180 due to the voluntary payment and the acknowledgement of responsibility.
Related Enforcement Actions (7)
Other enforcement actions involving Website operator in ES
Fine
€180
Details
Fine Date
5 June 2024
Authority
Agencia Española de Protección de Datos
Fine Amount
€180
Enforcement Tracker ID
ETid-2386
About this data
Cite as: Cookie Fines. Website operator - Spain (2024). Retrieved from cookiefines.eu
Last updated: