Xfera Moviles S.A. – €60,000 Fine (Spain, 2020)
General GDPR enforcement action
This case relates to broader data protection obligations, not specifically to cookie or consent banner compliance. It is not included in cookie statistics or the Risk Calculator.
A Spanish telecom company was fined for not deleting a customer's personal data after they canceled their service. They continued to process the customer's data without a valid reason. This ruling stresses that companies must delete personal data when it is no longer needed.
What happened
The company failed to remove a customer's personal data after the cancellation of their telephone services contract.
Who was affected
The customer whose personal data was not deleted after canceling their service.
What the authority found
The authority found that the company processed personal data without a sufficient legal basis after the service was canceled.
Why this matters
This ruling serves as a reminder that businesses must promptly delete personal data when it is no longer necessary. Companies should have clear policies for data retention and deletion.
GDPR Articles Cited
View original scraped data
Original data from scraper before AI verification against source document.
Failure to remove the data subject's personal data at the time of cancellation of his/her telephone services contract and sending a warning to the data subject after cancellation resulting in the processing of his/her personal data without sufficient legal basis.
Related Enforcement Actions (15)
Other enforcement actions involving Xfera Moviles S.A. in ES
Fine
€60K
Details
Fine Date
25 September 2020
Authority
Agencia Española de Protección de Datos
Fine Amount
€60,000
Enforcement Tracker ID
ETid-408
About this data
Cite as: Cookie Fines. Xfera Moviles S.A. - Spain (2020). Retrieved from cookiefines.eu
Last updated: