Spain

Telefónica de España, S.A.U

45,000 €

GDPR enforcement action by Spanish Data Protection Authority (aepd) on 2021-05-21.

Rank · Sector

#204

of 369 in Media, Telecoms and Broadcasting

Rank · Spain

#247

of 1,075

Rank · All fines

#763

of 3,050

Case details

Authority: Spanish Data Protection Authority (aepd)
Date: 2021-05-21
Controller / Processor: Telefónica de España, S.A.U
Sector: Media, Telecoms and Broadcasting
Quoted Articles: Art. 6 GDPR
Type of violation: Insufficient legal basis for data processing

Summary

The Spanish DPA (AEPD) has imposed a fine of EUR 75,000 on Telefonica de España, S.A.U.. A data subject had filed a complaint with the AEPD against the telecommunications company.
The controller had booked a service for the data subject without the data subject having concluded a contract for it. After the data subject had accordingly not made any payments for this service, the service was canceled in the same year and a collection agency was commissioned to collect allegedly outstanding debts. The AEPD determined that neither the data processing for the service booking nor the transfer of the data subject's personal data to the collection agency had taken place lawfully. The original fine of EUR 75,000 was reduced to EUR 45,000 due to immediate payment and admission of responsibility.

Open original source Links to the regulator's original publication or another source.