Italy

Palumbo Superyacht Ancona s.r.l.

50,000 €

GDPR enforcement action by Italian Data Protection Authority (Garante) on 2022-04-07.

Rank · Sector

#34

of 213 in Employment

Rank · Italy

#112

of 543

Rank · All fines

#713

of 3,051

Case details

Authority: Italian Data Protection Authority (Garante)
Date: 2022-04-07
Controller / Processor: Palumbo Superyacht Ancona s.r.l.
Sector: Employment
Quoted Articles: Art. 5 (1) a), e) GDPR, Art. 13 GDPR, Art. 12 (3) GDPR, Art. 15 GDPR, Art. 157 Codice della privacy, Art. 166 (2) Codice della privacy
Type of violation: Insufficient legal basis for data processing

Summary

The Italian DPA has fined Palumbo Superyacht Ancona s.r.l. EUR 50,000. The company had blocked an employee's company email account without permission. The employee had reported the incident to the company and asked for the restoration of the e-mail inbox, which contained both private and business e-mails. However, the company did not comply with this request.
In the course of its investigation, the DPA found further violations. For example, the company did not respond to a request for information from the DPA and violated the principle of limiting data retention.

Open original source Links to the regulator's original publication or another source.