The Spanish Data Protection Authority (AEPD) imposed a fine of 75.000 EUR on VODAFONE ESPAÑA for processing the claimant’s telephone number for marketing purposes after they had exercised their right to erasure in 2015, in spite of what the data subject was sent advertising SMS. The controller stated that the claimant number, being easy to remember, had been used as a “dummy number” by its employees.
The AEPD considered that VODAFONE ESPAÑA violated Article 6(1) of the GDPR, by processing the claimant's personal data without any lawful basis.
You can read the text of the decision in Spanish here.
For further information, please contact the Spanish DPA: firstname.lastname@example.org