Website operator – €1,000 Fine (Spain, 2023)

€1,000Agencia Española de Protección de Datos26 April 2023Spain
final
Fine

General GDPR enforcement action

This case relates to broader data protection obligations, not specifically to cookie or consent banner compliance. It is not included in cookie statistics or the Risk Calculator.

Spain's data protection authority fined a website operator €1,000 for not having a privacy policy that met GDPR standards. The website failed to provide clear information about how it handled user data. This serves as a reminder for all website operators to ensure their privacy policies are up-to-date and transparent.

What happened

The Spanish DPA fined a website operator €1,000 for a non-compliant privacy policy.

Who was affected

Visitors to the website who were not properly informed about how their personal data was being used.

What the authority found

The authority found that the website's privacy policy did not meet the transparency requirements of GDPR Article 13.

Why this matters

This case underscores the importance of having a clear and compliant privacy policy on websites. It reminds operators to regularly review their policies to ensure they meet GDPR transparency standards.

GDPR Articles Cited

Art. 13 GDPR
Spain enforcementAgencia Española de Protección de Datos actionsAll Website operator actions
Full Legal Summary
Detailed

The Spanish DPA has imposed a fine of EUR 1,000 on a website operator for failing to ensure that the privacy policy on its website complied with the requirements of Art. 13 GDPR.

Violations (3)

Cookies Placed Before Consent
critical

Non-essential cookies (tracking, advertising) are placed on the user's device before obtaining valid consent.

Art. 6(1) GDPR

Unclear Cookie Information
high

The cookie banner or cookie policy provides vague, incomplete, or unclear information about what cookies are used and why.

Art. 12, 13 GDPR

Misleading Banner Messaging
critical

The cookie banner uses misleading language to trick or pressure users into accepting cookies (dark patterns).

Art. 7 GDPR

Related Enforcement Actions (3)

Other enforcement actions involving Website operator in ES

Fine
Sept 2021· Agencia Española de Protección de Datos

The Spanish DPA (AEPD) has imposed a fine of EUR 9,000 on the controller of a website. A person had filed a complaint with the DPA due to the fact tha...

€9K
Fine
Jan 2022· Agencia Española de Protección de Datos

The Spanish DPA (AEPD) imposed a fine of EUR 2,000 on a website operator for the lack of a privacy policy on its website, in violation of Art. 13 GDPR...

€2K
Current
Apr 2023

Fine

€1K

Fine
Jun 2024· Agencia Española de Protección de Datos

The Spanish DPA has imposed a fine on the operator of a website for storing data of a data subject for an excessively long period of time and contrary...

€180

Similar Cases

Enforcement actions with similar violations

Data Subject versus Telecommunications Company

2025 · DPA OLGKoblenz

Legal Person

2023 · Úřad pro ochranu osobních údajů

€4K

Ramona Films, S.L.

2022 · Agencia Española de Protección de Datos

€8K

CNIL

2019 · Court of Justice of the European Union

Minister for Legal Protection

2022 · DPA RbOverijssel

Details

Fine Date

26 April 2023

Authority

Agencia Española de Protección de Datos

Fine Amount

€1,000

Enforcement Tracker ID

ETid-1792

Sources

About this data

Data: CMS GDPR Enforcement Tracker
Licensed under CC BY-NC-SA 4.0
AI-verified and classified

Cite as: Cookie Fines. Website operator - Spain (2023). Retrieved from cookiefines.eu

Report Inaccuracy

Last updated: