Spain

MEDEROS MOVITEN, S.L.

15,000 €

GDPR enforcement action by Spanish Data Protection Authority (aepd) on 2022-04-28.

Rank · Sector

#285

of 369 in Media, Telecoms and Broadcasting

Rank · Spain

#362

of 1,075

Rank · All fines

#1,192

of 3,050

Case details

Authority: Spanish Data Protection Authority (aepd)
Date: 2022-04-28
Controller / Processor: MEDEROS MOVITEN, S.L.
Sector: Media, Telecoms and Broadcasting
Quoted Articles: Art. 6 (1) GDPR
Type of violation: Insufficient legal basis for data processing

Summary

The Spanish DPA (AEPD) has imposed a fine of EUR 15,000 on MEDEROS MOVITEN, S.L.. The data subject had signed a mobile service contract with the company. However, the company also invoiced the data subject for services to which the data subject had not consented. The contracts for these services contained the personal data of the data subject but no signature. Due to the lack of a valid contract, the DPA determined that the company illegally processed the personal data of the data subject for the contracts in question and thus violated Art. 6 (1) GDPR.

Open original source Links to the regulator's original publication or another source.