Vodafone España, S.A.U.
€60,000
Insufficient legal basis for data processing
Fecha de la decisión
4 de marzo de 2020
Autoridad
Spanish Data Protection Authority (aepd)
ES
Sector
Media, Telecoms and Broadcasting
País
ES
Ley
GDPREstado
FINALDescripción
According to the AEPD, the data subject has received several SMS from a separate operator indicating the activation of a new contract. The reason for this was that an employee of Vodafone España activated a contract with a third operator on behalf of the data subject. Vodafone could not demonstrate consent or sufficient legitimate interests for this processing of personal data.
Citas legales
Art. 5Art. 6
Problemas e infracciones
Insufficient legal basis for data processing