Terra, Brasa Y Mar – €500 Fine (Spain, 2025)
General GDPR enforcement action
This case relates to broader data protection obligations, not specifically to cookie or consent banner compliance. It is not included in cookie statistics or the Risk Calculator.
Terra, Brasa Y Mar was fined €500 for adding people to a WhatsApp group without their permission. This is important because it emphasizes that businesses need to ask for consent before using personal data. Restaurant owners should be careful about how they communicate with customers.
What happened
The owner of Terra, Brasa Y Mar added over 200 people to a promotional WhatsApp group without their consent.
Who was affected
Individuals who were added to the WhatsApp group without their permission.
What the authority found
The Spanish DPA ruled that the restaurant violated GDPR by processing personal data without a legal basis.
Why this matters
This ruling serves as a reminder for businesses to obtain consent before using personal information. It sets a precedent that unauthorized use of personal data can lead to fines.
GDPR Articles Cited
View original scraped data
Original data from scraper before AI verification against source document.
In December 2023, the data subject, along with over 200 others, was added to a WhatsApp group by the owner of Terra, Brasa Y Mar (data controller), a restaurant. No consent was sought for the inclusion of the data subjects in the WhatsApp group. The WhatsApp group was used to promote a New Years Eve celebration taking place in the restaurant. The messages included information about the menu that would be served on the occasion and the price. In December 2023, the data subject filed a complaint with the AEPD (Spanish DPA). The DPA found that the controller had infringed Article 6(1) GDPR for processing personal data without a legal basis. The DPA noted that the impact of the infringement was relatively serious, as each data subject’s phone number was exposed to everyone else in the group. Accordingly, the DPA imposed an administrative fine of €500 on the controller.
Related Enforcement Actions (0)
No other enforcement actions found for Terra, Brasa Y Mar in ES
This is the only recorded action for this entity in this jurisdiction.
Details
Fine Date
2 April 2025
Authority
Agencia Española de Protección de Datos
Fine Amount
€500
About this data
Cite as: Cookie Fines. Terra, Brasa Y Mar - Spain (2025). Retrieved from cookiefines.eu
Last updated: