Vodafone España, S.A.U.

€60,000

Insufficient legal basis for data processing

Date de décision

3 février 2020

Autorité

Spanish Data Protection Authority (aepd)

ES

Secteur

Media, Telecoms and Broadcasting

Pays

ES

Droit

GDPR

Statut

FINAL

Description

The fine was preceded by a complaint from the data subject, who argued that he had received an e-mail from Vodafone España, which contained the billing of a telephone line that the data subject had never requested, which led to his personal data being processed without his consent. As a result, the data subject's personal data were incorporated into the information systems of Vodafone España without Vodafone being able to show that the data subject had consented to the collection and subsequent processing of his personal data. The fine of 100,000 EUR was reduced to 60,000 EUR due to a voluntary payment.

Citations légales

Art. 5Art. 6

Questions et violations

Insufficient legal basis for data processing

Restez informé sur l'application de la législation en matière de protection de la vie privée

Nous respectons votre vie privée. Un courriel par mois, pas de spam, désabonnement à tout moment.