Spain

Vodafone España, S.A.U.

42,000 €

GDPR enforcement action by Spanish Data Protection Authority (aepd) on 2020-11-16.

Rank · Sector

#210

of 369 in Media, Telecoms and Broadcasting

Rank · Spain

#253

of 1,075

Rank · All fines

#776

of 3,050

Case details

Authority: Spanish Data Protection Authority (aepd)
Date: 2020-11-16
Controller / Processor: Vodafone España, S.A.U.
Sector: Media, Telecoms and Broadcasting
Quoted Articles: Art. 5 GDPR, Art. 6 GDPR
Type of violation: Insufficient legal basis for data processing

Summary

In 2019, after an arbitration procedure, the company agreed to the early termination of a contract with the data subject and to the deletion of the personal data concerned. Nevertheless, the data subject continued to receive e-mails from the company, which constituted processing of personal data without a sufficient legal basis.

Open original source Links to the regulator's original publication or another source.