Vodafone España, S.A.U.
€36,000
Insufficient legal basis for data processing
Decision Date
October 25, 2019
Authority
Spanish Data Protection Authority (aepd)
ES
Sector
Media, Telecoms and Broadcasting
Country
ES
Law
GDPRStatus
FINALDescription
The claimant, whose data had been provided to the company by his daughter, as authorised by him, received a call from the company offering its services, which he refused. However, Vodafone España proceeded to providing him services and seeking payment from him, so Vodafone España had processed the claimant's personal data without his consent.
Legal Citations
Art. 5Art. 6
Issues & Violations
Insufficient legal basis for data processing