Spain: Data Protection Authority's Ruling on Data Protection Regulation Violation

On 29 October 2023, the Spanish Data Protection Agency ruled against RAMONA FILMS S.L. for multiple violations of the General Data Protection Regulation (GDPR) and the Spanish Law on the Protection of Personal Data and Guarantee of Digital Rights (LOPDGDD). The company was found to have collected personal data without obtaining informed consent, used cookies without proper user consent, and failed to provide necessary contractual documentation with third-party providers. The authority imposed fines totalling 232'000 euros and ordered the company to implement appropriate security measures within one month.