Spain

Vodafone España, S.A.U.

36,000 €

GDPR enforcement action by Spanish Data Protection Authority (aepd) on 2019-10-25.

Rank · Sector

#242

of 371 in Media, Telecoms and Broadcasting

Rank · Spain

#288

of 1,079

Rank · All fines

#868

of 3,085

Case details

Authority: Spanish Data Protection Authority (aepd)
Date: 2019-10-25
Controller / Processor: Vodafone España, S.A.U.
Sector: Media, Telecoms and Broadcasting
Quoted Articles: Art. 5 GDPR, Art. 6 GDPR
Type of violation: Insufficient legal basis for data processing

Summary

The claimant, whose data had been provided to the company by his daughter, as authorised by him, received a call from the company offering its services, which he refused. However, Vodafone España proceeded to providing him services and seeking payment from him, so Vodafone España had processed the claimant's personal data without his consent.

Open original source Links to the regulator's original publication or another source.