Website operator
Insufficient fulfilment of information obligations
Date de décision
18 avril 2022
Autorité
Spanish Data Protection Authority (aepd)
ES
Secteur
Individuals and Private Associations
Pays
RO
Droit
GDPRStatut
FINALDescription
The Spanish DPA (AEPD) has imposed a fine on the operator of the website link During its investigation, the DPA found numerous deficiencies on a website operated by the controller. For example, the controller processed data from visitors to the website without their explicit consent. In addition, the website did not contain any type of privacy policy. The DPA therefore found that the controller violated its duties set out in Art. 13 GDPR. Furthermore, the DPA found deficiencies in cookie use. The original fine of EUR 3,000 was reduced to EUR 1,800 due to immediate payment and acknowledgement of guilt.