Spain

Vodafone España, S.A.U.

40,000 €

GDPR enforcement action by Spanish Data Protection Authority (aepd) on 2019.

Rank · Sector

#213

of 369 in Media, Telecoms and Broadcasting

Rank · Spain

#262

of 1,075

Rank · All fines

#788

of 3,050

Case details

Authority: Spanish Data Protection Authority (aepd)
Date: 2019
Controller / Processor: Vodafone España, S.A.U.
Sector: Media, Telecoms and Broadcasting
Quoted Articles: Art. 6 GDPR
Type of violation: Insufficient legal basis for data processing

Summary

The company had charged a Netflix service that had not been solicited by the claimant. The claimant could prove that the service had been used by another household which allegedly had received the claimant's bank account and phone number from Vodafone. Since Vodafone could not prove that the claimant had consented to the conclusion of the contract concerning the Netflix services, the AEPD imposed a fine of EUR 40.000.

Open original source Links to the regulator's original publication or another source.