Sanction RGPD Spanish Data Protection Authority (aepd) — MAD COOL FESTIVAL S.L. : 4 k€ (2025)
- Autorité de contrôle
- Spanish Data Protection Authority (aepd)
- Pays
- Espagne
- Entreprise / secteur
- MAD COOL FESTIVAL S.L.
- Montant de l'amende
- 4 k€
- Date de la décision
- 30 mars 2025
- Fondement juridique
- Art. 5 (1) f), Art. 32
- Manquement
- Mesures techniques et organisationnelles insuffisantes
Résumé des faits
The Spanish DPA (AEPD) has imposed a fine of EUR 3,500 on MAD COOL FESTIVAL S.L. The controller suffered a data breach due to insufficient technical and organizational measures. The total fine consists of a fine of EUR 2,000 for infringing on Art. 5(1)(f) GDPR, and EUR 1,500 for the violation of Art. 32 GDPR. The total sum can be reduced by 20% (resulting in a fine of EUR 2,800) with timely payment.