Vodafone España, S.A.U.
€36,000
Insufficient legal basis for data processing
Decision Date
November 19, 2020
Authority
Spanish Data Protection Authority (aepd)
ES
Sector
Media, Telecoms and Broadcasting
Country
ES
Law
GDPRStatus
FINALDescription
Processing of personal data of a data subject without sufficient legal basis. The company had sent an invoice to a data subject without being able to prove that it had a contract with the data subject.
Legal Citations
Art. 5Art. 6
Issues & Violations
Insufficient legal basis for data processing