Vodafone España, S.A.U.
€24,000
Insufficient legal basis for data processing
Decision Date
March 3, 2020
Authority
Spanish Data Protection Authority (aepd)
ES
Sector
Media, Telecoms and Broadcasting
Country
ES
Law
GDPRStatus
FINALDescription
According to the AEPD, the company sent two SMS to an clients mobile number informing about a rate change in its contract and confirming the purchase of a new mobile phone, resulting in the processing of personal data without the data subjects consent or other legitimate interests of the company.
Legal Citations
Art. 5Art. 6
Issues & Violations
Insufficient legal basis for data processing