Enforcing jurisdiction
Spain · Geography does not establish applicable law.
Confirmed applicable legislation

Xfera Moviles S.A. – €60,000 Fine (Spain, 2019)

€60,000Agencia Española de Protección de Datos16 October 2019Spain
final
Fine

Privacy enforcement record

This record is classified outside cookie consent. Subject classification does not confirm an applicable law. It is not included in cookie statistics or the Risk Calculator.

Xfera Moviles S.A. was fined for using personal data without proper permission when signing up customers for phone contracts. This is important because it shows that companies cannot ignore user requests to stop processing their data. Businesses must ensure they have a valid reason to use personal information.

What happened

Xfera Moviles S.A. used personal data to conclude a telephone contract without a legal basis.

Who was affected

Individuals whose personal data was used by Xfera Moviles without their consent.

What the authority found

The authority determined that Xfera Moviles did not have a legal basis for processing personal data after a user requested to stop.

Why this matters

This ruling highlights the need for companies to respect user requests regarding their data. It serves as a warning that ignoring such requests can lead to significant fines.

Recorded legal citations
Automatically processed
Art. 5 GDPR
Art. 6 GDPR
View original scraped data
Art. 5(GDPR)
Art. 6(GDPR)

Original imported citations before automated processing; the processing history does not establish independent verification.

Source checks

Secondary-source text retrieved.

Automated check recorded — 12 March 2026.

No issues were reported by that automated check.

Retrieved text may be a secondary summary or an announcement. These automated statuses do not establish that the original decision was read or that the record received an independent legal review. How we check sources

Spain enforcementAgencia Española de Protección de Datos actionsAll Xfera Moviles S.A. actions
Full Legal Summary
Detailed

Xfera Movile has used personal data without a legal basis for the conclusion of a telephone contract and has continued to process personal data even when the data subject requested that the processing be discontinued.

Related Enforcement Actions (6)

Other enforcement actions involving Xfera Moviles S.A. in ES

Current
Oct 2019

Fine

€60K

Fine
Feb 2020· Agencia Española de Protección de Datos

According to the data protection authority, XFERA MOVILES has violated Article 6(1) of the GDPR, as the company has unlawfully processed data, includi...

€60K
Fine
Jun 2020· Agencia Española de Protección de Datos

A customer claimed to have received an SMS from Xfera Móviles informing about the non-payment and the resulting suspension of the service in relation ...

€39K
Fine
Jun 2020· Agencia Española de Protección de Datos

The data subject received a notice from a debt collection company demanding payments in connection with Xfera Móviles' services, even though the claim...

€75K
Fine
Jul 2020· Agencia Española de Protección de Datos

A data subject had received a call from another Xfera Móviles customer who stated that the company had charged his bank account with an invoice, discl...

€70K
Fine
Sept 2020· Agencia Española de Protección de Datos

Failure to remove the data subject's personal data at the time of cancellation of his/her telephone services contract and sending a warning to the dat...

€60K
Fine
Dec 2020· Agencia Española de Protección de Datos

The Spanish DPA (AEPD) imposed a fine on Xfera Móviles, S.A. due to insufficient legal basis for data processing. The data subject states that two tel...

€40K

Details

Fine Date

16 October 2019

Authority

Agencia Española de Protección de Datos

Fine Amount

€60,000

Sources

About this data

Data: CMS GDPR Enforcement Tracker
Licensed under CC BY-NC-SA 4.0
Automatically normalized and classified

Cite as: Cookie Fines. Xfera Moviles S.A. - Spain (2019). Retrieved from cookiefines.eu

Report Inaccuracy

Last updated: