Vodafone España, S.A.U.

€8,150,000

Insufficient fulfilment of data subjects rights

Dato for beslutning

11. marts 2021

Myndighed

Spanish Data Protection Authority (aepd)

ES

Sektor

Media, Telecoms and Broadcasting

Land

ES

Lovgivning

GDPR

Status

FINAL

Beskrivelse

Since 2018, the Spanish DPA (AEPD) had received a total of 191 complaints against Vodafone España, S.A.U. The data subjects complained about advertising calls and messages (e-mail and SMS) made on behalf of Vodafone España as part of marketing campaigns. The contact was made without the prior consent of the data subjects and continued even after they had exercised their right to object. Furthermore, many data subjects were contacted even though their numbers were on the Robinson list. The AEPD explains that aggravatingly, it took into account that Vodafone España had regularly received fines in more than 50 cases from January 2018 to February 2020, and the fact that there had been 162 complaints received by the AEPD in just under two years. The fine is composed as follows: EUR 4 million for a breach of Art. 28 GDPR and Art. 24 GDPR; EUR 2 million for a breach of Art. 44 GDPR; EUR 150,000 for a breach of Art. 21 LSSI; and EUR 2 million for a breach of Art. 48 (1) b) LGT, Art. 21 GDPR and Art. 23 LOPDGDD.

Juridiske citater

Art. 28Art. 24Art. 44Art. 21Art. 48 (1)Art. 21Art. 23

Problemer og overtrædelser

Insufficient fulfilment of data subjects rights

Hold dig opdateret om håndhævelse af privatlivets fred

Vi respekterer dit privatliv. En e-mail om måneden, ingen spam, afmeld når som helst.