Xfera Movies S.A. had insufficient legal basis to process personal data of a client who was registered as having two telephone and internet connections under his/her name. There was also a charge account attached to this. The data subjects claim they never signed any such contracts with the company. The AEPD discovered that the contracts had been concluded by fraudulent means (by third parties) using the personal data of the data subjects. However, the AEPD still considered that it was the company’s responsibility to verify whether the contracts in question had been lawfully and in concluded in good honesty by the actual data subjects, and whether the data subjects had given their consent for the collection and processing of their personal data.
xfera movies sa had insufficient legal basis to process personal data of a client who was registered as having two telephone and internet connections under his/her name there was also a charge account attached to this the data subjects claim they never signed any such contracts with the company the aepd discovered that the contracts had been concluded by fraudulent means by third parties using the personal data of the data subjects however the aepd still considered that it was the company’s responsibility to verify whether the contracts in question had been lawfully and in concluded in good honesty by the actual data subjects and whether the data subjects had given their consent for the collection and processing of their personal data
xfera movies sa  insufficient legal basis  process personal data   client   register   two telephone  internet connections  / name   also  charge account attach    data subject claim  never sign   contract   company  aepd discover   contract   conclude  fraudulent mean  third party use  personal data   data subject however  aepd still consider     company’ responsibility  verify whether  contract  question   lawfully   conclude  good honesty   actual data subject  whether  data subject  give  consent   collection  process   personal data