Greece

Vodafone

10,000 €

GDPR enforcement action by Hellenic Data Protection Authority (HDPA) on 2023-02-02.

Rank · Sector

#299

of 366 in Media, Telecoms and Broadcasting

Rank · Greece

#48

of 93

Rank · All fines

#1,381

of 3,042

Case details

Authority: Hellenic Data Protection Authority (HDPA)
Date: 2023-02-02
Controller / Processor: Vodafone
Sector: Media, Telecoms and Broadcasting
Quoted Articles: Art. 5 (1) a), b) GDPR, Art. 6 (1), (4) GDPR, Art. 13 GDPR
Type of violation: Non-compliance with general data processing principles

Summary

The Hellenic DPA has imposed a fine of EUR 10,000 on Vodafone. An individual had filed a complaint with the DPA because they had received a package containing promotional gifts from a company working with Vodafone, even though they had expressly objected to the use of their data for promotional purposes. During its investigation, the DPA found that the controller processed the data without a valid legal basis and thus acted unlawfully. The DPA also found that the controller could not prove that it had comprehensively informed the data subject about the processing of their personal data in accordance with Art. 13 GDPR.

Open original source Links to the regulator's original publication or another source.