Orange Espagne S.A.U.
€80,000
Insufficient legal basis for data processing
Decision Date
20 de julho de 2020
Authority
Spanish Data Protection Authority (aepd)
ES
Sector
Media, Telecoms and Broadcasting
Country
ES
Law
GDPRStatus
FINALDescription
The company had unlawfully activated several telephone line contracts using the personal data of a data subject. This constituted an unlawful processing operation, since the data of the data subject was entered into the company's database and processed there without a legitimate legal basis.
Legal Citations
Art. 5Art. 6
Issues & Violations
Insufficient legal basis for data processing