GDPR Fines

A public record of GDPR enforcement across Europe — compiled by INPLP members

Vueling Airlines

Country
Spain
Fine
30,000 EUR
Date
2019-10-01
Sector
Business Sector
Articles
Art. 5 GDPRArt. 6 GDPR

Inadequate legal basis for data processing

The Spanish data protection authority (AEPD) has fined Vueling Airlines 30,000 euros for not providing users with the ability to refuse their cookies and force them to use them when they want to surf its website. In other terms, it was not possible to surf the Vueling site without accepting their cookies. The AEDP imposed a sanction of 30,000 euros, which could be reduced to 18,000 euros for immediate payment. Authority: Spanish Data Protection Authority (aepd)

Source: https://www.aepd.es/resoluciones/PS-00300-2019_ORI.pdf

Reported by: Andersen Tax & Legal