Spain

Vodafone España, S.A.U.

36,000 €

GDPR enforcement action by Spanish Data Protection Authority (aepd) on 2019-10-25.

Rank · Sector

#240

of 369 in Media, Telecoms and Broadcasting

Rank · Spain

#285

of 1,075

Rank · All fines

#855

of 3,050

Case details

Authority: Spanish Data Protection Authority (aepd)
Date: 2019-10-25
Controller / Processor: Vodafone España, S.A.U.
Sector: Media, Telecoms and Broadcasting
Quoted Articles: Art. 5 GDPR, Art. 6 GDPR
Type of violation: Insufficient legal basis for data processing

Summary

The claimant, whose data had been provided to the company by his daughter, as authorised by him, received a call from the company offering its services, which he refused. However, Vodafone España proceeded to providing him services and seeking payment from him, so Vodafone España had processed the claimant's personal data without his consent.

Open original source Links to the regulator's original publication or another source.