Vodafone España, S.A.U.
Insufficient legal basis for data processing
Päätöspäivä
3. helmikuuta 2020
Viranomainen
Spanish Data Protection Authority (aepd)
ES
Ala
Media, Telecoms and Broadcasting
Maa
ES
Laki
GDPRTila
FINALKuvaus
The fine was preceded by a complaint from the data subject, who argued that he had received an e-mail from Vodafone España, which contained the billing of a telephone line that the data subject had never requested, which led to his personal data being processed without his consent. As a result, the data subject's personal data were incorporated into the information systems of Vodafone España without Vodafone being able to show that the data subject had consented to the collection and subsequent processing of his personal data. The fine of 100,000 EUR was reduced to 60,000 EUR due to a voluntary payment.