VODAFONE ONO, S.A.U.
€56,000
Insufficient legal basis for data processing
Decision Date
June 6, 2023
Authority
Spanish Data Protection Authority (aepd)
ES
Sector
Media, Telecoms and Broadcasting
Country
ES
Law
GDPRStatus
FINALDescription
The Spanish DPA has imposed a fine on VODAFONE ONO, S.A.U.. The controller had carried out a credit check on an individual without there being a customer relationship or other affiliation. The personal data of the data subject was thus processed without a legal basis.The original fine of EUR 70,000 was reduced to EUR 56,000 for voluntary payment.
Legal Citations
Art. 6 (1)
Issues & Violations
Insufficient legal basis for data processing