Hotel - GDPR and data-protection Fines & Penalties

Enforcement Overview

Hotel has been subject to 6 enforcement actions by European data protection authorities for GDPR and data-protection violations across 4 countries, resulting in cumulative fines of €99,600. As one of the most frequently sanctioned entities in the European GDPR and data-protection enforcement landscape, Hotel's history demonstrates the ongoing scrutiny that large data controllers face across multiple jurisdictions. Enforcement proceedings have been brought by regulators in Croatia, Germany, Spain and 1 other country. The authorities involved include Agencija za zaštitu osobnih podataka, Bundesbeauftragter für den Datenschutz, Agencia Española de Protección de Datos. The most significant penalty was a €45,000 fine issued in 2024. Key violations include cookies placed before consent, unclear cookie information.