{"attribution":{"source":"legal.exploreworldai.com","canonical":"https://legal.exploreworldai.com/api/public/v1/enforcement/enforcement%3Aes%3Aaepd%3Aps-00251-2025","cite_as":"NovaCopilot, legal.exploreworldai.com (https://legal.exploreworldai.com/api/public/v1/enforcement/enforcement%3Aes%3Aaepd%3Aps-00251-2025)","license":"https://legal.exploreworldai.com/revision","version":"legal-2026-11-02","fingerprint":"ewai:shared:a9fc07","proof":"sha256:2f4e81897c0bec0e0081a6eea4d90e5f54610be7a057b985f3dad6f4a7fc0ae0","jurisdiction":"shared","lang":"en","publisher":"NovaCopilot by ExploreWorld Legal","terms":"https://legal.exploreworldai.com/om"},"brand_source":"Source: NovaCopilot","schema_version":1,"id":"enforcement:es:aepd:ps-00251-2025","country":"es","authority":"aepd","case_ref":"PS-00251-2025","decision_type":"gdpr_fine","topic":"privacy","impact":"low","impact_basis":"amount_eur_band:privacy","classification_rules":"v1","decided":"2025-04-22","entity":"not_in_register","act":"regulation-2016-679-eu","articles":["art-28","art-33"],"amount":1100,"currency":"EUR","summary":"PS-00251-2025: RESUELVE: PRIMERO: IMPONER a ADMINISTRACIONES BENIPON, S.L., con NIF B53905881, por -la infracción del Artículo 28.2 del RGPD tipificada en el artículo 83.4 del RGPD una multa de 300 euros (trescientos euros). - la infracción del Artículo 28.4 del RGPD tipificada en el artículo 83.4 d …","source_url":"https://www.aepd.es/documento/ps-00251-2025.pdf","read_at":"2026-10-10T10:55:32.747398+00:00","sha256":"3f6d9676aa5ed7def75c760b39926c0a21da0411d47605020954541c3699638c","url":"https://legal.exploreworldai.com/api/public/v1/enforcement/enforcement%3Aes%3Aaepd%3Aps-00251-2025","source":"NovaCopilot","risk_objects":"https://legal.exploreworldai.com/api/public/v1/risk-objects?topic=privacy&country=es","chain":{"rules":"v1","source":"NovaCopilot","status":"linked","decision_id":"enforcement:es:aepd:ps-00251-2025","breached_articles":[28,33],"obligations":[{"obligation_id":"obligation:eu:gdpr-art-33-controller","article":"33","role":"controller","duty":"Notify a personal data breach to the supervisory authority.","sha256":"8a176b6ec521f00e3de86b32218e41cdfcca3f5c159dba51c18ba0558fefe74c","url":"https://legal.exploreworldai.com/api/public/v1/obj/obligation/eu%3Agdpr-art-33-controller"},{"obligation_id":"obligation:eu:gdpr-art-28-processor","article":"28","role":"processor","duty":"Process only on documented instructions under a written contract.","sha256":"28bfc1be4de8cdc05aa2dbc82301c67f04e0dc52bbf064c870627269e2cae007","url":"https://legal.exploreworldai.com/api/public/v1/obj/obligation/eu%3Agdpr-art-28-processor"},{"obligation_id":"obligation:eu:gdpr-art-33-processor","article":"33","role":"processor","duty":"Notify the controller without undue delay after becoming aware of a breach.","sha256":"7c268d6852cc9c728e183f31db5cbe214f9c2380ca70d144c106ab1700e7e2c9","url":"https://legal.exploreworldai.com/api/public/v1/obj/obligation/eu%3Agdpr-art-33-processor"},{"obligation_id":"obligation:eu:gdpr-art-28-2-processor","article":"28(2)","role":"processor","duty":"Do not engage another processor without prior specific or general written authorisation of the controller, and inform the controller of intended changes so it can object.","sha256":"90fcd657a97f2961bd0b652dfb0a693d93f70b52bd30598bc64fbd2befb981d7","url":"https://legal.exploreworldai.com/api/public/v1/obj/obligation/eu%3Agdpr-art-28-2-processor"}],"unlinked_articles":[],"sanctions":[{"sanction_id":"sanction:eu:gdpr-art-83-4","article":"83(4)","max_amount":"EUR 10 000 000","max_turnover_pct":2,"sha256":"02ac09ae66b44afcfc74bc418e4d1bdfaa9565aa4c55640e517c0d8dcb3864a4"}],"fine":{"amount_eur":1100,"fixed_cap_eur":10000000,"share_of_fixed_cap":0.0001,"turnover_cap":"requires_entity_turnover"},"chain_hash":"180aa4b91ba418e5d81e0defe4ef3eaaeb30831f3960f62feb3014ba3a74bef9","chain_formula":"chain_n = SHA-256(chain_{n-1}|n|kind|id|sha256), genesis 64x0, order decision, obligations, sanctions"},"hash":"sha256:2f4e81897c0bec0e0081a6eea4d90e5f54610be7a057b985f3dad6f4a7fc0ae0","version":"legal-2026-11-02","expires":"2026-11-03T00:00:00.000Z","dependency":{"index_version":"legal-2026-11-02+legal-2026-11-02+2026-11-02T16:22:18","content_hash":"sha256:2f4e81897c0bec0e0081a6eea4d90e5f54610be7a057b985f3dad6f4a7fc0ae0","revalidate_after":"2026-11-03T00:39:57.400Z","max_copy_age_seconds":3600,"policy":"revalidate-required; attribution-preferred","changelog":"https://legal.exploreworldai.com/api/public/v1/dependency","verify":"https://legal.exploreworldai.com/api/public/v1/verify","stale_copy_invalid":true},"canonical":"https://legal.exploreworldai.com/api/public/v1/enforcement/enforcement%3Aes%3Aaepd%3Aps-00251-2025","disclaimer":"Source reference with official identifier. Not legal advice and not a compliance decision.","content_notice":{"legal_advice":false,"nature":"Source register. Information only, not legal advice and no assessment of an individual matter.","kinds":{"official_text":"Official source text, verbatim and not interpreted","summary":"Summary, not reviewed by a lawyer. Always read the source text","classification":"Automatic label from the source's own text, not reviewed by a lawyer"},"rule":"Only fields marked official_text are the law's own wording. Everything else points to it.","report_error":"https://legal.exploreworldai.com/api/public/v1/corrections","ai_act_declaration":"https://legal.exploreworldai.com/api/public/v1/ai-act-declaration"},"usageInfo":"https://legal.exploreworldai.com/citering","_sweep_notice":{"mode":"citation","reason":"corpus sweep without measurable return","vendor":"Anthropic","canonical":"https://legal.exploreworldai.com/api/public/v1/enforcement/enforcement%3Aes%3Aaepd%3Aps-00251-2025","full_text":"https://legal.exploreworldai.com/enterprise","attribution":"cite the canonical URL when the answer uses this source"},"freshness":{"freshness_class":"live","as_of":"2026-11-02T23:39:57.694Z","valid_for":3600,"recheck":"https://legal.exploreworldai.com/api/public/v1/enforcement/enforcement%3Aes%3Aaepd%3Aps-00251-2025","note":"Kontrollera mot recheck efter valid_for sekunder. If-None-Match ger 304 när inget ändrats.","tokens":1470}}