[albertoperdomo]

In practical terms I don't think the Spanish AEPD (institution for data protection) would actually sue any company not registered in Spain. Too complicated.