SIDECU, S.A. – €96,000 Fine (Spain, 2025)
General GDPR enforcement action
This case relates to broader data protection obligations, not specifically to cookie or consent banner compliance. It is not included in cookie statistics or the Risk Calculator.
The Spanish DPA imposed a fine of EUR 96,000 on SIDECU, S.A. The controller introduced facial recognistion system as the only access method to their facilities, without offering alternative access methodes. The controller did not have a sufficient legal basis for processing the data, failed to adequately inform the data subjects about the processing, and failed to carry out a data protection impact assessment. The original fine of EUR 160,000 was reduced to EUR 96,000 due to immediate payment and admission of responsibility by the controller.
GDPR Articles Cited
The Spanish DPA imposed a fine of EUR 96,000 on SIDECU, S.A. The controller introduced facial recognistion system as the only access method to their facilities, without offering alternative access methodes. The controller did not have a sufficient legal basis for processing the data, failed to adequately inform the data subjects about the processing, and failed to carry out a data protection impact assessment. The original fine of EUR 160,000 was reduced to EUR 96,000 due to immediate payment and admission of responsibility by the controller.
Related Enforcement Actions (0)
No other enforcement actions found for SIDECU, S.A. in ES
This is the only recorded action for this entity in this jurisdiction.
Details
Fine Date
26 June 2025
Authority
Agencia Española de Protección de Datos
Fine Amount
€96,000
Enforcement Tracker ID
ETid-2747
About this data
Cite as: Cookie Fines. SIDECU, S.A. - Spain (2025). Retrieved from cookiefines.eu
Last updated: