Vodafone España, S.A.U.

€8,150,000

Insufficient fulfilment of data subjects rights

決定日期

2021年3月11日

權限

Spanish Data Protection Authority (aepd)

ES

部門

Media, Telecoms and Broadcasting

國家

ES

法律

GDPR

狀態

FINAL

說明

Since 2018, the Spanish DPA (AEPD) had received a total of 191 complaints against Vodafone España, S.A.U. The data subjects complained about advertising calls and messages (e-mail and SMS) made on behalf of Vodafone España as part of marketing campaigns. The contact was made without the prior consent of the data subjects and continued even after they had exercised their right to object. Furthermore, many data subjects were contacted even though their numbers were on the Robinson list. The AEPD explains that aggravatingly, it took into account that Vodafone España had regularly received fines in more than 50 cases from January 2018 to February 2020, and the fact that there had been 162 complaints received by the AEPD in just under two years. The fine is composed as follows: EUR 4 million for a breach of Art. 28 GDPR and Art. 24 GDPR; EUR 2 million for a breach of Art. 44 GDPR; EUR 150,000 for a breach of Art. 21 LSSI; and EUR 2 million for a breach of Art. 48 (1) b) LGT, Art. 21 GDPR and Art. 23 LOPDGDD.

法律引文

Art. 28Art. 24Art. 44Art. 21Art. 48 (1)Art. 21Art. 23

問題與違規

Insufficient fulfilment of data subjects rights

保持最新的隱私權執法資訊

我們尊重您的隱私。每月一封電子郵件,無垃圾郵件,可隨時取消訂閱。