XFERA MOVILES S.A. (YOIGO) – €20,000 Fine (Spain, 2020)
General GDPR enforcement action
This case relates to broader data protection obligations, not specifically to cookie or consent banner compliance. It is not included in cookie statistics or the Risk Calculator.
Spain's data protection authority fined YOIGO €20,000 for not cooperating with an investigation. The company failed to provide information about a contract signed without a customer's consent. This case highlights the importance of cooperating with data protection authorities during investigations.
What happened
YOIGO did not cooperate with the Spanish data protection authority's investigation into a contract signed without a customer's consent.
Who was affected
An individual whose personal data was used to sign a contract without their consent.
What the authority found
The Spanish data protection authority found YOIGO violated GDPR by not cooperating with the investigation.
Why this matters
This case emphasizes that companies must cooperate with data protection authorities when asked, or they risk fines. It serves as a reminder for businesses to maintain open communication with regulatory bodies.
GDPR Articles Cited
A claimant, an individual, lodged a complaint with the AEPD because he/she found out from his/her bank account that a contract had been entered into in his/her name and with his/her personal data without his/her consent, and also because he/she had been included in a creditworthiness file for an unpaid debt related to the aforementioned contract. The AEPD requested from YOIGO information on the contracts signed with the claimant, as well as information on the debt that led to its inclusion in a solvency list. In the contracts provided by the claimant, there is no signature of the claimant accepting the content of the contracts. The AEPD first proposed a sanction for infringement of Article 6 (1) GDPR but withdrew these charges due to the non-existence of the infringement when the complainant responded with allegations and documents which this time, unlike those provided in the evidence phase, were signed by the complainant. Furthermore, the complainant argued that the events had taken place before the entry into force of the GDPR and the LOPDGDD and would therefore not be the applicable rules. On the other hand, it did not make any reference in its allegations to the breach of Article 31 GDPR in relation to its obligation to collaborate with the data protection supervisory authority. Is the failure to cooperate with the data protection supervisory authority a breach of Article 31 GDPR in conjunction with Article 58(1)(e) GDPR? Having assessed all the various documents provided by the complainant, it seems fair to conclude that, in view of the circumstances of the case, it exercised a minimum and reasonable diligence in identifying the person who signed the contracts and provided as her own the NIE and the name of the complainant. Furthermore, as regards its duty to cooperate with the supervisory authority, the defendant did not comply with its obligation to cooperate and make allegations regarding the infringement of Article 31 GDPR in conjunction with Article
Related Enforcement Actions (0)
No other enforcement actions found for XFERA MOVILES S.A. (YOIGO) in ES
This is the only recorded action for this entity in this jurisdiction.
Details
Fine Date
4 November 2020
Authority
Agencia Española de Protección de Datos
Fine Amount
€20,000
GDPRhub ID
gdprhub-2883About this data
Cite as: Cookie Fines. XFERA MOVILES S.A. (YOIGO) - Spain (2020). Retrieved from cookiefines.eu
Last updated: