ManagoraMANAGORA
ESEN

Complaint to the AEPD (Spanish Data Protection Agency) over misuse of your personal data

Complaint to the AEPD (Spanish Data Protection Agency) over misuse of your personal data is filed with Sede Electrónica de la Agencia Española de Protección de Datos. With Managora you do it 100% online: you answer a few questions, sign a digital mandato (power of representation) and we draft, sign and file your recurso (appeal) for you. What we charge you: €450.

Start this procedure →See all procedures

We file a complaint before the Agencia Española de Protección de Datos (Spanish Data Protection Agency) over illegal video surveillance, credit blacklists, security breaches, the right to be forgotten or any improper processing of your personal data. Where appropriate, we first draft the exercise of your right before the controller as a prior step, at no extra cost.

Practical guide: Data protection: GDPR rights and claiming before the AEPD. Requirements, deadlines and the steps, explained.

What we charge you
€450
Managora's fee
€450.00 (21% VAT incl.)
Tasa (official government fee)
No tasa payable
Processing time
There is no single deadline: art. 64 of the LOPDGDD splits this into two routes with opposite effects. If you complain ONLY because a right under arts. 15 to 22 of the GDPR was not honoured, it is 6 months from notification that your claim was admitted, and once they pass you may treat your claim as UPHELD (positive silence, art. 64.1). Where a possible infringement is at stake, the procedure lasts a maximum of 12 months from the opening decision and, once past, it lapses and is filed away (art. 64.2). Before any of that, the AEPD has 3 months to notify you whether it admits the claim (art. 65.5).
Where it is filed
Sede Electrónica de la Agencia Española de Protección de Datos ↗
What you receive
Recurso (administrative appeal)

Cost breakdown: Our fee €450.00 (21% VAT incl.). The complaint before the Agencia Española de Protección de Datos (Spanish Data Protection Agency) is free of charge, with no tasa (official fee)..

Complaint to the AEPD (Spanish Data Protection Agency) over misuse of your personal data: how is it filed?

  1. 1Answer the chat questions (~4 minutes).
  2. 2We will show you whether your case is directly actionable or whether it is advisable to first exercise the right before the controller.
  3. 3Payment of €450.00 (21% VAT incl.). If a prior exercise is required, we include the written document to the controller at no additional cost and, once the legal one-month period has elapsed, we escalate to the AEPD.
  4. 4Sign the mandato (mandate) from your mobile.
  5. 5Complaint submitted at sedeagpd.gob.es by our case handler.
  6. 6You receive the official acknowledgement of receipt from the AEPD, a full copy of the written document, the signed mandato (mandate) and the invoice.

Which documents do you need?

  • •Screenshots, emails, photos or any documentary evidence you have. You do not need to upload them here; we will tell you how to send them to us if relevant.
  • •If you exercised the right before the controller, a copy of the email or burofax (certified notice) with your acknowledgement of receipt.

Legal basis and things to bear in mind

  • The AEPD is free of charge: you pay no tasa (official fee) to the body. Our fee covers the technical drafting and the submission.
  • Limitation of INFRINGEMENTS: 3 years for very serious ones (art. 72), 2 years for serious ones (art. 73) and 1 year for minor ones (art. 74). Art. 78 does not govern this: it governs the limitation of PENALTIES already imposed, and by amount (1 year up to 40,000 €, 2 years from 40,001 to 300,000 and 3 years above that). For rights protection there is no fixed deadline, but it is advisable to act promptly.
  • POSITIVE silence in rights protection: if the 6 months from admission pass with no decision, the person concerned may treat the claim as upheld (art. 64.1). It is the exception to the general rule of negative silence, and hardly anyone invokes it.
  • If the AEPD forwards the claim to the controller because it has no data protection officer and is not signed up to an out-of-court mechanism, that controller must reply within one month (art. 65.4).
  • Preliminary investigation may not last more than 18 months from the decision admitting the claim (art. 67.2).
  • If the controller responds after the complaint is filed and resolves the matter, the procedure may be closed by withdrawal. We will advise you on the best strategy.

Complaint to the AEPD (Spanish Data Protection Agency) over misuse of your personal data: frequently asked questions

Complaint to the AEPD (Spanish Data Protection Agency) over misuse of your personal data: how much does it cost?

We charge you €450: our fee plus, where applicable, the fixed official tasa we advance. Our fee €450.00 (21% VAT incl.). The complaint before the Agencia Española de Protección de Datos (Spanish Data Protection Agency) is free of charge, with no tasa (official fee).. Managora's fee is €450.00, 21% VAT included (€371.90 net + €78.10 VAT). This procedure carries no official tasa.

Complaint to the AEPD (Spanish Data Protection Agency) over misuse of your personal data: how long does it take?

There is no single deadline: art. 64 of the LOPDGDD splits this into two routes with opposite effects. If you complain ONLY because a right under arts. 15 to 22 of the GDPR was not honoured, it is 6 months from notification that your claim was admitted, and once they pass you may treat your claim as UPHELD (positive silence, art. 64.1). Where a possible infringement is at stake, the procedure lasts a maximum of 12 months from the opening decision and, once past, it lapses and is filed away (art. 64.2). Before any of that, the AEPD has 3 months to notify you whether it admits the claim (art. 65.5).

Complaint to the AEPD (Spanish Data Protection Agency) over misuse of your personal data: which documents do I need?

You need to have to hand: Screenshots, emails, photos or any documentary evidence you have. You do not need to upload them here; we will tell you how to send them to us if relevant., If you exercised the right before the controller, a copy of the email or burofax (certified notice) with your acknowledgement of receipt.. You do not upload them here: we collect the details through the guided chat.

Who files the procedure?

Managora files it in your name with Sede Electrónica de la Agencia Española de Protección de Datos. You only provide the details through the chat and sign a mandato (power of representation); we prepare, sign and register it.

Can it be done online?

Yes. The whole process is online: you answer a few questions in the guided chat, sign a simple mandato on screen and receive the receipt and the official documents by email, with full legal validity.

Related procedures

Based on the legislation in force and on the official site of the competent authority: Sede Electrónica de la Agencia Española de Protección de Datos ↗.

Managora Gestion SL (company number B88823893) is a private company. We are not Sede Electrónica de la Agencia Española de Protección de Datos, we are not affiliated with, authorised or endorsed by any public authority, and this website is not an official government portal. What you pay on this page is our fee for preparing, signing and filing the procedure on your behalf: it is separate from the official tasa, which where applicable belongs to the authority and is shown to you separately. You can carry out this procedure yourself, directly with Sede Electrónica de la Agencia Española de Protección de Datos.

Shall we get started with «Complaint to the AEPD (Spanish Data Protection Agency) over misuse of your personal data»?

We file it for you, from start to finish.

Start now →