Italy

Made in Italy s.r.l.s.

20,000 €

GDPR enforcement action by Italian Data Protection Authority (Garante) on 2022-04-07.

Rank · Sector

#156

of 595 in Industry and Commerce

Rank · Italy

#189

of 543

Rank · All fines

#1,045

of 3,039

Case details

Authority: Italian Data Protection Authority (Garante)
Date: 2022-04-07
Controller / Processor: Made in Italy s.r.l.s.
Sector: Industry and Commerce
Quoted Articles: Art. 6 GDPR, Art. 7 GDPR, Art. 15 GDPR, Art. 17 GDPR, Art. 21 GDPR, Art. 130 (3) Codice della privacy, Art. 157 Codice della privacy, Art. 166 (2) Codice della privacy
Type of violation: Insufficient legal basis for data processing

Summary

The Italian DPA (Garante) has imposed a fine of EUR 20,000 on Made in Italy s.r.l.s.. A data subject had filed a complaint with the DPA after receiving promotional calls from the data controller, even though they had not consented to it. Even after the data subject had objected to the sending, the controller did not stop the calls. The data subject then requested information about the origin of the data and the deletion of this data. However, the controller did not respond to this request. Also, the controller had not sufficiently cooperated with the DPA in the course of the investigation.

Open original source Links to the regulator's original publication or another source.