Sanction RGPD Hellenic Data Protection Authority (HDPA) — Vodafone : 10 k€ (2023)
- Autorité de contrôle
- Hellenic Data Protection Authority (HDPA)
- Pays
- Grèce
- Entreprise / secteur
- Vodafone
- Montant de l'amende
- 10 k€
- Date de la décision
- 2 février 2023
- Fondement juridique
- Art. 5 (1) a), b), Art. 6 (1), (4), Art. 13
- Manquement
- Non-respect des principes de traitement
Résumé des faits
The Hellenic DPA has imposed a fine of EUR 10,000 on Vodafone. An individual had filed a complaint with the DPA because they had received a package containing promotional gifts from a company working with Vodafone, even though they had expressly objected to the use of their data for promotional purposes. During its investigation, the DPA found that the controller processed the data without a valid legal basis and thus acted unlawfully. The DPA also found that the controller could not prove that it had comprehensively informed the data subject about the processing of their personal data in accordance with Art. 13 GDPR.