Vodafone España, S.A.U.

€60,000

Insufficient legal basis for data processing

Decision Date

3 de fevereiro de 2020

Authority

Spanish Data Protection Authority (aepd)

ES

Sector

Media, Telecoms and Broadcasting

Country

ES

Law

GDPR

Status

FINAL

Description

The fine was preceded by a complaint from the data subject, who argued that he had received an e-mail from Vodafone España, which contained the billing of a telephone line that the data subject had never requested, which led to his personal data being processed without his consent. As a result, the data subject's personal data were incorporated into the information systems of Vodafone España without Vodafone being able to show that the data subject had consented to the collection and subsequent processing of his personal data. The fine of 100,000 EUR was reduced to 60,000 EUR due to a voluntary payment.

Legal Citations

Art. 5Art. 6

Issues & Violations

Insufficient legal basis for data processing

Stay Updated on Privacy Enforcement

We respect your privacy. One email per month, no spam, unsubscribe anytime.