Vodafone España, S.A.U.
€56,000
Insufficient legal basis for data processing
Decision Date
November 22, 2023
Authority
Spanish Data Protection Authority (aepd)
ES
Sector
Media, Telecoms and Broadcasting
Country
ES
Law
GDPRStatus
FINALDescription
The Spanish data protection authority has imposed a fine of EUR 50,000 on VODAFONE ESPAÑA, S.A.U.. A customer had filed a complaint with the DPA regarding the fact that due to a system error, an Amazon sales partner had concluded a contract without first obtaining the consent of the data subject.
Legal Citations
Art. 6 (1)
Issues & Violations
Insufficient legal basis for data processing