Vodafone España, S.A.U.
€40,000
Insufficient legal basis for data processing
Datum der Entscheidung
3. März 2020
Behörde
Spanish Data Protection Authority (aepd)
ES
Sektor
Media, Telecoms and Broadcasting
Land
ES
Recht
GDPRStatus
FINALBeschreibung
According to the AEPD, the company sent an SMS to an clients mobile number confirming that a telephone contract with that number had been signed even though the client was not a Vodafone client, resulting in the processing of personal data without the data subjects consent or other legitimate interests of the company.
Juristische Zitate
Art. 5Art. 6
Probleme und Verstöße
Insufficient legal basis for data processing