Spain

Vodafone España, S.A.U.

24,000 €

GDPR enforcement action by Spanish Data Protection Authority (aepd) on 2020-03-03.

Rank · Sector

#267

of 366 in Media, Telecoms and Broadcasting

Rank · Spain

#317

of 1,071

Rank · All fines

#979

of 3,042

Case details

Authority: Spanish Data Protection Authority (aepd)
Date: 2020-03-03
Controller / Processor: Vodafone España, S.A.U.
Sector: Media, Telecoms and Broadcasting
Quoted Articles: Art. 5 GDPR, Art. 6 GDPR
Type of violation: Insufficient legal basis for data processing

Summary

According to the AEPD, the company sent two SMS to an clients mobile number informing about a rate change in its contract and confirming the purchase of a new mobile phone, resulting in the processing of personal data without the data subjects consent or other legitimate interests of the company.

Open original source Links to the regulator's original publication or another source.