The company violated Art. 6, 13, and 14 GDPR, which prompted the Spanish DPA (AEPD) to fine the company with EUR 40,000. The company is the operator of a phone prank app where you can prank other people by entering their phone numbers. The recipient of the call is called from a suppressed number and “pranked”. The APED took notice of a violation of the operator’s obligation to offer information regarding the collection of personal data of the person to be pranked. Moreover, the company does not inform the data subject (the person to be pranked and recorded) of his/her right to consent according to the provisions of the GDPR.
the company violated   and  which prompted the spanish dpa aepd to  the company with  the company is the operator of a phone prank app where you can prank other people by entering their phone numbers the recipient of the call is called from a suppressed number and “pranked” the aped took notice of a  of the operator’s obligation to offer information regarding the collection of personal data of the person to be pranked moreover the company does not inform the data subject the person to be pranked and recorded of his/her right to consent according to the provisions of the 
 company violate      prompt  spanish dpa aepd    company    company   operator   phone prank app    prank  people  enter  phone number  recipient   call  call   suppress number  “pranked”  ape take notice      operator’ obligation  offer information regard  collection  personal data   person   prank moreover  company   inform  data subject  person   prank  record  / right  consent accord   provision   