Vodafone España, SAU

€30,000

Insufficient legal basis for data processing

Дата принятия решения

15 ноября 2021 г.

Авторитет

Spanish Data Protection Authority (aepd)

ES

Сектор

Media, Telecoms and Broadcasting

Страна

ES

Закон

GDPR

Статус

FINAL

Описание

The Spanish DPA (AEPD) has imposed a fine on Vodafone España SAU. A data subject had filed a complaint with the AEPD against the data controller. The data subject states that he had received invoices and debits on his bank account for the payment of Vodafone services that he had not booked himself. The data subject also stated that he had been asked to pay for these services by the debt collection company I.S.G.F. Informes Comerciales, S.L.. As it turned out, fraudsters had used the data subject's personal data to conclude a service contract. Vodafone had subsequently canceled the contract for the booked services. Due to a system error, however, the outstanding invoices had not been canceled, which is why they had been forwarded to the collection agency. The AEPD determined that this transmission was unlawful due to the non-existence of a valid contract. The original fine of EUR 50,000 was reduced to EUR 30,000 due to voluntary payment and admission of guilt.

Юридические цитаты

Art. 6 (1)

Проблемы и нарушения

Insufficient legal basis for data processing

Будьте в курсе событий, связанных с соблюдением конфиденциальности

Мы уважаем вашу конфиденциальность. Одно письмо в месяц, без спама, отказ от подписки в любое время.