πͺπΈ βοΈ No Commercial Prospecting via SMS Without Consent
Data Subject Rights, Legal basis | 26/03/2025
Source : PS- 00325-2024 π Context

π’ A citizen received a new unsolicited commercial offer for a gym membership.

βοΈ Complaint filed in March 2024 wi...
Read more
π¨ Abusive recording of employees, video surveillance, performance tracking softwareπ«π·
Retention & Minimisation, Confidentiality & Security, Tools & Documentation | 26/03/2025
β €40,000 Fine for a Real Estate Company The CNIL has sanctioned a company for installing monitoring software on its employees' computers to track the...
Read more
ππΊ π Hungary: A Beauty Contest for Pregnant Women illegal!
Data Subject Rights | 26/03/2025
π’ A Facebook Contest launched by a deputy

On January 28, 2025, a Hungarian MP launched a Facebook beauty contest for pregnant women titled “The Bless...
Read more
πͺπΈ When a Loan Simulation on a Website Turns into a Real Loanβ¦
Data Subject Rights, Retention & Minimisation | 26/03/2025
Right to Erasure Not Applied, a Bank Sanctioned by the AEPD Source : PS 00196-2024

π Facts

A citizen conducted a loan simulation on an online compar...
Read more
πͺπΈ CCTV Surveillance: When a Hotel Gets Tangled in Its Retention Periods!!!
Biometrics & Video Surveillance | 26/03/2025
β οΈ Inconsistencies in Data Retention Policy π’ AEPD Issues a Warning! π Facts:

π
05/11/2022 – Client Request ποΈ A guest at a Spanish hotel requested ...
Read more
πͺπΈ Spain: An Influencer Sanctioned by the AEPD After Posting a Video on TikTok!
Data Subject Rights, Retention & Minimisation, Legal basis | 26/03/2025
π’ Consent is Never Implicit!

Source : PS 00471-2023

π± A content creator posted a video on TikTok and Instagram, featuring a 13-year-old minor answe...
Read more
πͺπΈ Spain: When a postal service provider abandons letters in a field...
Confidentiality & Security | 26/03/2025
π Facts: • September 28, 2022: π Police in La Palma discovered 1,404 letters abandoned in a field. π A complaint was filed with the AEPD. The provide...
Read more
πͺπΈ No Facial Recognition System for Work Time Control!
Biometrics & Video Surveillance | 26/03/2025
AEPD Sanctions Cartonajes Bañeres S.A. for GDPR Violations πͺπΈ Source : PS 00361-2023

The Spanish Data Protection Agency (AEPD) has imposed a €220,00...
Read more
πͺπΈ An Employer Cannot Publish Personal Information About a Former Employee in Comments πͺπΈ
Confidentiality & Security, Legal basis | 26/03/2025
Source : PS-00395-2021

ποΈ Facts: In response to negative reviews left by customers on Google, a Spanish café published the personal data of its form...
Read more
πͺπΈPrivacy: A Bug Generates Automatic Sending of Data to Third Parties
Confidentiality & Security | 26/03/2025
π¨ Health Data and Adequate Protection! π¨ Source : PS 00540-2024

A Spanish health insurance provider fined €600,000 for a confidentiality breach. The...
Read more
πͺπΈ A health insurance contractβ¦ without consent!
Legal basis | 26/03/2025
π’ Erroneous Subscription and Unjustified Bank Withdrawals: SANITAS and BBVA Sanctioned Source : PS 00479-2023 π Facts:

π‘οΈ A health insurance contra...
Read more
πͺπΈ Garbage: Lack of data confidentiality, a club sanctioned
Confidentiality & Security | 26/03/2025
β οΈ Using a Document Shredder Can Prevent Penalties! β οΈ Source : PS-00460-2024

π A Spanish football club fined for throwing personal data in the tras...
Read more