the Spanish National Data Protection Agency has initiated a preliminary