Vodafone España, S.A.U.
€42,000
Insufficient legal basis for data processing
Decision Date
16 de novembro de 2020
Authority
Spanish Data Protection Authority (aepd)
ES
Sector
Media, Telecoms and Broadcasting
Country
ES
Law
GDPRStatus
FINALDescription
In 2019, after an arbitration procedure, the company agreed to the early termination of a contract with the data subject and to the deletion of the personal data concerned. Nevertheless, the data subject continued to receive e-mails from the company, which constituted processing of personal data without a sufficient legal basis.
Legal Citations
Art. 5Art. 6
Issues & Violations
Insufficient legal basis for data processing