Vodafone España, S.A.U. – €60,000 Fine (Spain, 2019)

Vodafone sent an invoice history to the subscriber as part of the invoice complaint by the subscriber. The history also contained invoice data of an u...

The claimant, whose data had been provided to the company by his daughter, as authorised by him, received a call from the company offering its service...

The company had sent a contract with personal data, including the applicant's name, address and telephone number, to the wrong recipient.

Failure to provide information to the AEPD within the required timeframe in violation of Article 58

The fine was preceded by a complaint from the data subject, who argued that he had received an e-mail from Vodafone España, which contained the billin...

The complainant had access to third party data in his personal Vodafone profile.

According to the AEPD, the company sent an SMS to an clients mobile number confirming that a telephone contract with that number had been signed even ...

According to the AEPD, the company had not been able to demonstrate adequate measures to ensure information security, leading to unauthorized access t...

According to the AEPD, the company sent two SMS to an clients mobile number informing about a rate change in its contract and confirming the purchase ...

According to the AEPD, the data subject has received several SMS from a separate operator indicating the activation of a new contract. The reason for ...

Processing of personal data of a data subject without sufficient legal basis due to errors in the correct assignment of customer contracts. In this ca...

The company ported a telephone number of the data subject without their consent (missing signature on the porting contract).

In 2019, after an arbitration procedure, the company agreed to the early termination of a contract with the data subject and to the deletion of the pe...

Processing of personal data of a data subject without sufficient legal basis. The company had sent an invoice to a data subject without being able to ...

The claimant complained to the Spanish DPA (AEPD) that he/she was still receiving invoicing emails from Vodafone España, S.A.U. despite no longer bein...

A data subject filed a complaint with the Spanish DPA (AEPD) against Vodafone as they received a phone call with commercial purposes from the company ...

Failure to provide information to the Spanish DPA (AEPD) within the required timeframe in violation of Art. 58 GDPR. The original fine of EUR 5,000 wa...

The Spanish DPA (AEPD) has imposed a fine on Vodafone España, S.A.U.. A data subject had filed a complaint with the DPA against the controller for fai...

The Spanish DPA (AEPD) imposed a fine on Vodafone España, S.A.U. for insufficient legal basis for data processing. The data subject stated that two te...

Insufficient legal basis for data processing