Spain

Xfera Moviles S.A.

75,000 €

GDPR enforcement action by Spanish Data Protection Authority (aepd) on 2020-06-15.

Rank · Sector

#127

of 369 in Media, Telecoms and Broadcasting

Rank · Spain

#134

of 1,075

Rank · All fines

#554

of 3,050

Case details

Authority: Spanish Data Protection Authority (aepd)
Date: 2020-06-15
Controller / Processor: Xfera Moviles S.A.
Sector: Media, Telecoms and Broadcasting
Quoted Articles: Art. 6 GDPR
Type of violation: Insufficient legal basis for data processing

Summary

The data subject received a notice from a debt collection company demanding payments in connection with Xfera Móviles' services, even though the claimant had not been a customer of Xfera Móviles since September 2017. Furthermore, the resolution states that Xfera Móviles carried out the processing of the personal data of the plaintiff without his consent, which constitutes a violation of Article 6 of the GDPR.

Open original source Links to the regulator's original publication or another source.