Vodafone España, S.A.U.
€75,000
Insufficient legal basis for data processing
Decision Date
February 3, 2020
Authority
Spanish Data Protection Authority (aepd)
ES
Sector
Media, Telecoms and Broadcasting
Country
ES
Law
GDPRStatus
FINALDescription
The fine preceded the complaint by the data subject, who argued that Vodafone España had signed a contract for the transfer of a telephone subscription with a third party without the data subject's knowledge or consent and that, as a result, he, the data subject, had received an e-mail from the third party for a purchase made by him.
Legal Citations
Art. 5Art. 6
Issues & Violations
Insufficient legal basis for data processing