SIDECU, S.A. – €96,000 Fine (Spain, 2025)
General GDPR enforcement action
This case relates to broader data protection obligations, not specifically to cookie or consent banner compliance. It is not included in cookie statistics or the Risk Calculator.
SIDECU, S.A. was fined €96,000 for using a facial recognition system as the only way to access its facilities. This was a problem because they didn't provide other access options and didn't properly inform people about how their data was being used. This case highlights the importance of offering choices and being transparent about data processing.
What happened
SIDECU, S.A. implemented a facial recognition system without offering alternative access methods.
Who was affected
Visitors trying to access SIDECU's facilities who were affected by the facial recognition system.
What the authority found
The Spanish DPA found that SIDECU lacked a valid legal basis for processing personal data and failed to inform users adequately.
Why this matters
This ruling emphasizes that companies must provide clear options for accessing services and be transparent about data usage. Other businesses should ensure they have valid reasons for processing personal data and communicate this effectively.
GDPR Articles Cited
View original scraped data
Original data from scraper before AI verification against source document.
The Spanish DPA imposed a fine of EUR 96,000 on SIDECU, S.A. The controller introduced facial recognistion system as the only access method to their facilities, without offering alternative access methodes. The controller did not have a sufficient legal basis for processing the data, failed to adequately inform the data subjects about the processing, and failed to carry out a data protection impact assessment. The original fine of EUR 160,000 was reduced to EUR 96,000 due to immediate payment and admission of responsibility by the controller.
Related Enforcement Actions (0)
No other enforcement actions found for SIDECU, S.A. in ES
This is the only recorded action for this entity in this jurisdiction.
Details
Fine Date
26 June 2025
Authority
Agencia Española de Protección de Datos
Fine Amount
€96,000
Enforcement Tracker ID
ETid-2747
About this data
Cite as: Cookie Fines. SIDECU, S.A. - Spain (2025). Retrieved from cookiefines.eu
Last updated: