Spanish data protection agency, AEPD, has fined Facebook 1.2 million euros ($1.4 million) for the unauthorized collection of the personal information of users in Spain. This information could be used to target the users with advertising, the watchdog alleged.

According to AEPD, this fine is the result of an investigation into Facebook, and mirrors similar investigations in the Netherlands, Germany, France and Belgium.

AEPD said it had found several cases in which the social networking site had collected personal details such as browsing history, beliefs, gender and preferences without informing users.

Facebook uses cookies to collect information from users who do not have Facebook accounts, but navigate to sites containing Facebook “like” buttons.

“Facebook’s privacy policy contains generic and unclear terms,” the authority said in a statement.

“The social network uses specifically protected data for advertising, among other purposes, without obtaining users’ express consent as data protection law demands, a serious infringement.”