Xfera Moviles S.A. – €90,000 Fine (Spain, 2021)
General GDPR enforcement action
This case relates to broader data protection obligations, not specifically to cookie or consent banner compliance. It is not included in cookie statistics or the Risk Calculator.
Xfera Moviles S.A. was fined EUR 90,000 by the Spanish data protection authority for sending unwanted SMS ads and mistakenly sharing another customer's private data. This case highlights the importance of respecting user preferences and securing personal data. Businesses should ensure they have proper consent and data protection measures in place.
What happened
Xfera Moviles S.A. sent over 60 unwanted SMS ads and shared another customer's confidential data by mistake.
Who was affected
A person who received unsolicited SMS ads and another customer's private login information.
What the authority found
The Spanish authority found that Xfera Moviles violated GDPR by not respecting user objections and failing to protect personal data.
Why this matters
This case emphasizes the need for companies to respect customer preferences and secure personal data. It serves as a reminder to review consent processes and data handling practices.
GDPR Articles Cited
The Spanish DPA (AEPD) imposed a fine of EUR 150,000 on Xfera Móviles S.A.. The DPA had received two complaints from a data subject. The first complaint concerned the sending of advertising SMS messages that the data subject received from the controller, although he had objected to this and requested that his data be deleted. According to the data subject, he received over 60 SMS messages within 30 days. The second complaint was filed by the data subject because the controller repeatedly sent him messages containing confidential data of a third party. This concerned the login information of another customer to a company platform. On the portal, it was possible to view personal information as well as invoices, among other things. Although the data subject had informed the company of this, the incorrect mailing did not end. The original fine of EUR 150,000 was reduced to EUR 90,000 due to immediate payment and admission of guilt.
Related Enforcement Actions (10)
Other enforcement actions involving Xfera Moviles S.A. in ES
Fine
€90K
Details
Fine Date
10 March 2021
Authority
Agencia Española de Protección de Datos
Fine Amount
€90,000
Enforcement Tracker ID
ETid-593
About this data
Cite as: Cookie Fines. Xfera Moviles S.A. - Spain (2021). Retrieved from cookiefines.eu
Last updated: