# MEDEROS MOVITEN, S.L.: Insufficient legal basis for data processing

- Type: Enforcement
- Source: Spanish Data Protection Authority (aepd)
- Date: 2022-04-28
- Original: https://www.enforcementtracker.com/ETid-1153
- Canonical: https://overview.legal/posts/47268
- Topics: Personal Data, Processing Agreement, Consent, Telecommunications, Processing, Supervisory Authorities

## Summary

The Spanish DPA (AEPD) has imposed a fine of EUR 15,000 on MEDEROS MOVITEN, S.L.. The data subject had signed a mobile service contract with the company. However, the company also invoiced the data subject for services to which the data subject had not consented. The contracts for these services contained the personal data of the data subject but no signature. Due to the lack of a valid contract, the DPA determined that the company illegally processed the personal data of the data subject for th

## Full text

The Spanish DPA (AEPD) has imposed a fine of EUR 15,000 on MEDEROS MOVITEN, S.L.. The data subject had signed a mobile service contract with the company. However, the company also invoiced the data subject for services to which the data subject had not consented. The contracts for these services contained the personal data of the data subject but no signature. Due to the lack of a valid contract, the DPA determined that the company illegally processed the personal data of the data subject for the contracts in question and thus violated Art. 6 (1) GDPR.

GDPR Articles: Art. 6 (1) GDPR
Industry: Media, Telecoms and Broadcasting

---
Generated by overview.legal · https://overview.legal/posts/47268 · 2026-08-22