VODAFONE SERVICIOS, S.L.U.

€40,000

Insufficient legal basis for data processing

Ημερομηνία απόφασης

26 Οκτωβρίου 2021

Αρχή

Spanish Data Protection Authority (aepd)

ES

Τομέας

Media, Telecoms and Broadcasting

Χώρα

ES

Νόμος

GDPR

Κατάσταση

FINAL

Περιγραφή

The Spanish DPA (AEPD) has imposed a fine on VODAFONE SERVICIOS, S.L.U.. A data subject has filed a complaint with the AEPD against the data controller. The data subject states that she received invoices and debits on her bank account for the payment of Vodafone services that she had not booked herself. The data subject also stated that she was receiving calls from the collection company Bureau Veritas asking her to pay for these services. As it turned out, fraudsters had used the data subject's personal data to conclude a service contract. However, the personal data had been entered into the company's information systems without any verification that the contract was lawful and had actually been concluded by the data subject. The original fine of EUR 50,000 was reduced to EUR 40,000 due to the voluntary payment.

Νομικές παραπομπές

Art. 6 (1)

Θέματα & Παραβάσεις

Insufficient legal basis for data processing

Μείνετε ενημερωμένοι για την επιβολή του απορρήτου

Σεβόμαστε την ιδιωτικότητά σας. Ένα email ανά μήνα, χωρίς spam, διαγραφή ανά πάσα στιγμή.