Vueling Airlines
€30,000
Insufficient legal basis for data processing
Decision Date
1 de outubro de 2019
Authority
Spanish Data Protection Authority (aepd)
ES
Sector
Transportation and Energy
Country
ES
Law
GDPRStatus
FINALDescription
The Spanish Data Protection Agency (AEPD) has sanctioned Vueling Airlines with 30,000 euros for not giving users the ability to refuse their cookies and force them to use them if they want to browse its website. In other words, it was not possible to browse the Vueling page without accepting their cookies. AEDP issued a sanctioning resolution for the amount of 30,000 euros, which could be reduced to 18,000 for immediate payment.
Legal Citations
Art. 5
Issues & Violations
Insufficient legal basis for data processing