Spain

Vodafone España, S.A.U.

36,000 €

GDPR enforcement action by Spanish Data Protection Authority (aepd) on 2019-10-25.

Rank · Sector

#250

of 383 in Media, Telecoms and Broadcasting

Rank · Spain

#296

of 1,114

Rank · All fines

#904

of 3,223

Case details

Authority: Spanish Data Protection Authority (aepd)
Date: 2019-10-25
Controller / Processor: Vodafone España, S.A.U.
Sector: Media, Telecoms and Broadcasting
Quoted Articles: Art. 5 GDPR, Art. 6 GDPR
Type of violation: Insufficient legal basis for data processing

Summary

The claimant, whose data had been provided to the company by his daughter, as authorised by him, received a call from the company offering its services, which he refused. However, Vodafone España proceeded to providing him services and seeking payment from him, so Vodafone España had processed the claimant's personal data without his consent.

Open original source Links to the regulator's original publication or another source.