Owner of a Pharmacy Office – €6,600 Fine (Spain, 2025)

€6,600Agencia Española de Protección de Datos9 May 2025Spain
reduced
Fine

General GDPR enforcement action

This case relates to broader data protection obligations, not specifically to cookie or consent banner compliance. It is not included in cookie statistics or the Risk Calculator.

The Spanish DPA has imposed a fine on the owner of a pharmacy office. The controller processed data of residents of two geriatric centers without a sufficient legal basis. The controller also failed to inform the data subjects about the fact, that the controller processed their data and that they obtained the data from a third party. Lastly, the controller failed to use encrypted email services. The original fine of EUR 11,000 was reduced to EUR 6,600 due to immediate payment and admission of responsibility by the controller.

GDPR Articles Cited

Art. 14(GDPR)
Art. 32(GDPR)
Art. 6(1) GDPR
Full Legal Summary

The Spanish DPA has imposed a fine on the owner of a pharmacy office. The controller processed data of residents of two geriatric centers without a sufficient legal basis. The controller also failed to inform the data subjects about the fact, that the controller processed their data and that they obtained the data from a third party. Lastly, the controller failed to use encrypted email services. The original fine of EUR 11,000 was reduced to EUR 6,600 due to immediate payment and admission of responsibility by the controller.

Details

Fine Date

9 May 2025

Authority

Agencia Española de Protección de Datos

Fine Amount

€6,600

Enforcement Tracker ID

ETid-2640

About this data

Data: CMS GDPR Enforcement Tracker
Licensed under CC BY-NC-SA 4.0
AI-verified and classified

Cite as: Cookie Fines. Owner of a Pharmacy Office - Spain (2025). Retrieved from cookiefines.eu

Report Inaccuracy

Last updated: