ANRO Privacy Logo

How to Stop Spam Marketing in Spain with the Robinson List

The Robinson List in Spain: Everything You Need to Know as a Business or Individual

If you live in Spain, you have almost certainly received unwanted marketing calls, emails, or text messages (spam marketing) from companies you have never heard of. It is one of the most common complaints among residents, and especially among expats who find their phone numbers circulating among telemarketers shortly after signing a rental contract or opening a bank account.

Spain has a specific, legally-backed tool to fight this: the Robinson List (Lista Robinson). Whether you are an individual who wants to stop the spam, or a business that needs to understand its legal obligations before running marketing campaigns, this guide covers everything you need to know.

What Is the Robinson List in Spain?

The Robinson List is Spain’s official advertising exclusion service (servicio de exclusión publicitaria). It is a free, voluntary registry where individuals can sign up to block unsolicited commercial communications from companies they have no prior relationship with.

The service is managed by Adigital (the Spanish Digital Economy Association) and covers four communication channels:

  • Phone calls - the most common source of complaints
  • Postal mail -  physical advertising sent to your home address
  • Email - unsolicited promotional messages
  • Email - unsolicited promotional messages
  • SMS/messaging - text-based marketing

The name comes from Robinson Crusoe: the idea of being “isolated on an island” away from the flood of unwanted advertising. Similar opt-out registries exist across Europe, the UK has the Telephone Preference Service (TPS), Germany has the Robinsonliste, and the US has the Do Not Call Registry.

The Robinson List - How to Stop Spam in Spain
The Robinson List - How to Stop Spam Calls & Marketing in Spain

 

How to Register on the Robinson List (Step by Step)

Registration is free and takes about five minutes. Here is how to do it:

Step 1: Go to www.listarobinson.es

Step 2: Click “Apúntate en la lista” (Sign up for the list). The site is in Spanish, but you can use your browser’s translation feature.

Step 3: Register with your DNI/NIE number and personal details. You will need to provide the contact information you want to protect (phone number, email, postal address).

Step 4: Select the channels you want to block: phone, email, postal mail, and/or SMS.

Step 5: Confirm your registration via the verification email you receive.

Your registration becomes effective within a short period, but you should allow up to two months for the full effect, as companies are required to update their exclusion lists periodically.

Important Limitations to Understand

The Robinson List does not block all marketing. It only blocks communications from companies with which you have no prior relationship. This means:

  • Your bank, insurance company, or phone provider can still contact you with marketing if you are an existing customer (unless you specifically opt out with them directly).
  • If you gave consent to a specific company (for example, by ticking a box on a form), that consent overrides the Robinson List.
  • The list does not stop international scam calls or fraudulent communications, which are already illegal regardless.

The Legal Framework: Why the Robinson List Matters

The Robinson List is not just a voluntary nicety. It has serious legal backing under both Spanish and European data protection law.

Article 23 of the LOPDGDD

Spain’s Ley Orgánica 3/2018 de Protección de Datos y Garantía de los Derechos Digitales (LOPDGDD) explicitly regulates advertising exclusion systems in Article 23. The key provisions are:

  • Any person has the right to register in exclusion systems to avoid receiving unsolicited commercial communications.
  • Companies relying on legitimate interest as their legal basis for direct marketing are obligated to consult these exclusion lists before sending any communication.
  • Failure to check the list before a marketing campaign constitutes an infraction and can trigger sanctions from the AEPD (Spain’s Data Protection Authority).

GDPR Article 21: The Right to Object

Under the General Data Protection Regulation (GDPR), Article 21(2) gives every individual an unconditional right to object to the processing of their personal data for direct marketing purposes. When someone exercises this right, their data must cease to be processed for marketing immediately. The Robinson List is Spain’s practical implementation of this principle.

Ley General de Telecomunicaciones (2022 Reform)

Spain’s 2022 General Telecommunications Law introduced stricter rules on commercial calls. Since June 2023, companies can no longer make unsolicited marketing calls to anyone who has not given prior consent, unless there is an existing contractual relationship. This significantly strengthened the protection provided by the Robinson List.

What Businesses Must Do: Robinson List Compliance

This is where the Robinson List becomes critically important for any company operating in Spain—and this is the section that will help you avoid fines from the AEPD.

The Obligation to Check

If your company conducts direct marketing based on legitimate interest (Art. 6.1.f GDPR) rather than explicit consent, you are legally required to check the Robinson List before every campaign. This is not optional.

You should check the list:

  • Before launching any direct marketing campaign (phone, email, SMS, or postal)
  • At least monthly if you run regular campaigns
  • Every time you acquire a new marketing database or list of contacts

How to Access the List as a Business

Businesses can access the Robinson List through the Lista Robinson business portal. The system uses a privacy-preserving mechanism: you submit hashed versions of your contact data, and the system returns a yes/no result without exposing any personal data from the registry.

Penalties for Non-Compliance

The AEPD has consistently sanctioned companies that fail to check the Robinson List. Penalties include:

Infraction Level Fine Range Example
Minor Up to €40,000 Isolated failure to check
Serious €40,001 – €300,000 Systematic failure, repeated complaints
Very Serious €300,001 – €20M or 4% turnover Large-scale violations with GDPR breaches

In practice, most Robinson List-related sanctions from the AEPD fall in the €1,000 to €70,000 range for individual companies. However, repeated offenders or large-scale operations face significantly higher penalties.

Practical Compliance Checklist for Businesses

  • Register your company on the Lista Robinson business portal.
  • Build Robinson List checks into your marketing workflow—ideally automated via API.
  • Document every check (date, campaign, number of contacts filtered). This is your evidence of compliance.
  • Train your marketing team on the difference between consent-based and legitimate interest-based marketing.
  • Review your privacy notices to ensure data subjects are informed of their right to register on exclusion lists.
  • If you use a third-party marketing agency, contractually require them to check the Robinson List. You remain the data controller and bear the responsibility.
  • Maintain records as part of your Article 30 GDPR processing register.

The Existing Customer Exception (Soft Opt-In)

Under Article 21 of Spain’s LSSI-CE (Ley de Servicios de la Sociedad de la Información), there is an exception that allows businesses to send electronic marketing to existing customers without explicit consent, provided that:

  • The customer’s data was obtained in the context of a sale or service.
  • The marketing relates to similar products or services.
  • The customer was clearly informed at the time of data collection.
  • The customer was given a simple, free way to opt out (and this is offered in every communication).

This exception applies even if the person is on the Robinson List. However, the moment the customer opts out directly with you, you must stop immediately.

Is the Robinson List Effective?

This is one of the most frequently asked questions, and the honest answer is: it helps significantly, but it is not a silver bullet.

What it does well:

  • It substantially reduces marketing calls and messages from legitimate Spanish companies.
  • It gives you a legal mechanism to file complaints with the AEPD if a company contacts you despite your registration.
  • Many people report a noticeable drop in spam calls within weeks of registering.

What it does not do:

  • It cannot stop international scam calls or spoofed numbers.
  • It does not block marketing from companies you have an existing relationship with (you need to opt out directly with each one).
  • Some less scrupulous companies may still fail to check the list—though they risk fines if you report them.

For additional protection, consider using call-blocking apps like Truecaller alongside your Robinson List registration. You can also file complaints directly with the AEPD at www.aepd.es if companies continue to contact you.

The Robinson List and Your Data Protection Officer (DPO)

If your organisation has appointed a Data Protection Officer (DPO) (Delegado de Protección de Datos (DPD), they should ensure that Robinson List compliance is integrated into your marketing operations. Specifically, the DPO should:

  • Audit whether the marketing team checks the Robinson List before every campaign.
  • Review the organisation’s lawful basis for direct marketing (consent vs. legitimate interest).
  • Ensure that Data Protection Impact Assessments (DPIAs) for marketing activities include Robinson List considerations.
  • Handle complaints from data subjects who claim they were contacted despite being registered.
  • Include Robinson List procedures in staff training and data protection policies.

Frequently Asked Questions

Can I register on the Robinson List if I am a foreigner with a NIE?

Yes. Any person residing in Spain can register, whether you have a DNI (Spanish nationals) or a NIE (foreign residents). You need your identification number and the contact details you want protected.

Is the Robinson List available in English?

The official website (listarobinson.es) is currently only in Spanish. However, the registration process is straightforward and your browser’s built-in translation should work well enough to complete it.

How long does it take to become effective?

Registration is processed quickly, but companies are given a reasonable period to update their marketing lists. You should expect to see a reduction in unwanted communications within one to two months.

What should I do if a company contacts me after I have registered?

First, ask the company to stop and note down their details. If they continue, you can file a complaint with the AEPD. Your Robinson List registration serves as evidence that you opted out of unsolicited marketing.

Does the Robinson List apply to B2B marketing?

The Robinson List primarily covers personal data. However, if your B2B marketing targets identifiable individuals (which it almost always does), the same rules apply. Marketing emails sent to name@company.com are still processing personal data.

I run a small business. Do I still need to check the Robinson List?

Yes. There is no exemption based on company size. If you conduct direct marketing based on legitimate interest in Spain, you must check the list regardless of whether you are a sole trader or a multinational.

Take Action Today

For individuals: Register on the Robinson List at listarobinson.es today. It is free, takes five minutes, and will meaningfully reduce the amount of unsolicited marketing you receive.

For businesses: Make Robinson List checks a standard part of your marketing workflow. Document your compliance. Train your team. The cost of a fine from the AEPD is far greater than the cost of implementing a proper checking process.


Disclaimer: This content is provided for informational purposes only and does not constitute legal advice. It does not create any professional relationship between the reader and ANRO Privacy. For specific compliance guidance tailored to your organization's circumstances, consult a qualified Data Protection Officer or legal professional specializing in Spanish data protection law.

Legal Disclaimer

Informational Purposes Only: The content provided by ANRO DIGITAL SOLUTIONS S.L.U. (including resolution summaries, infographics, and case analyses) is for educational and informational purposes only.

No Legal Advice: This information does not constitute legal advice, a formal legal opinion, or a substitute for professional legal counsel. The interpretation of data protection laws (including the GDPR, LOPDGDD, and AEPD resolutions) is subject to change and can vary based on specific facts and circumstances.

No Liability: ANRO DIGITAL SOLUTIONS S.L.U. assumes no responsibility or liability for any actions taken, or not taken, based on the information provided on this website. While we strive for accuracy, we make no guarantees regarding the completeness or timeliness of the information.

Consult a Professional: Data protection compliance is a complex legal requirement. You should not act upon this information without seeking advice from a qualified Data Protection Officer (DPO) or a specialist data protection lawyer licensed to practice in your jurisdiction.

Third-Party Links: Links to official AEPD documents are provided for convenience. We are not responsible for the content or availability of these external government portals.

Este resumen tiene carácter meramente informativo. Para más información, consulte nuestro Aviso Legal.

ANRO Privacy Logo
Providing clear, reliable information on GDPR and data privacy standards to help you navigate the digital landscape securely.
linkedin facebook pinterest youtube rss twitter instagram facebook-blank rss-blank linkedin-blank pinterest youtube twitter instagram