CREMA GAMES, S.L.
Insufficient fulfilment of information obligations
Data deciziei
28 martie 2025
Autoritatea
Spanish Data Protection Authority (aepd)
ES
Sector
Media, Telecoms and Broadcasting
Țara
ES
Legea
GDPRStatut
FINALDescriere
The Spanish DPA imposed a fine on CREMA GAMES, S.L. The controller failed to fulfill an information request from an online customer. The controller asked the data subject for an identity document, but the data subject did not provide one. As a result, the controller refused to fulfill the information request. According to the DPA, the controller should have used a digital authentication method. The original fine of EUR 5,000 was reduced to EUR 4,000 due to immediate payment without admission of responsibility by the controller.