Sanction RGPD Spanish Data Protection Authority (aepd) — Vodafone España, S.A.U. : 60 k€ (2020)

Autorité de contrôle
Spanish Data Protection Authority (aepd)
Pays
Espagne
Entreprise / secteur
Vodafone España, S.A.U.
Montant de l'amende
60 k€
Date de la décision
4 mars 2020
Fondement juridique
Art. 5, Art. 6
Manquement
Base légale insuffisante pour le traitement

Résumé des faits

According to the AEPD, the data subject has received several SMS from a separate operator indicating the activation of a new contract. The reason for this was that an employee of Vodafone España activated a contract with a third operator on behalf of the data subject. Vodafone could not demonstrate consent or sufficient legitimate interests for this processing of personal data.

Décision officielle

Spanish Data Protection Authority (aepd)

Évaluer votre conformité RGPD avec Data Comply One