Italy

Nos s.r.l.s.

20,000 €

GDPR enforcement action by Italian Data Protection Authority (Garante) on 2022-04-28.

Rank · Sector

#157

of 595 in Industry and Commerce

Rank · Italy

#190

of 543

Rank · All fines

#1,047

of 3,042

Case details

Authority: Italian Data Protection Authority (Garante)
Date: 2022-04-28
Controller / Processor: Nos s.r.l.s.
Sector: Industry and Commerce
Quoted Articles: Art. 5 (1) a) GDPR, Art. 6 GDPR, Art. 7 GDPR, Art. 13 GDPR, Art. 14 GDPR
Type of violation: Insufficient legal basis for data processing

Summary

The Italian DPA fined Nos s.r.l.s. in the amount EUR 20,000. Nos acted as a processor for Vodafone and did advertising for the telecommunications company.

For this purpose, Nos had acquired as well as processed personal data from the companies Kdata ltd. and Dynamic Web Solution ltd. In the course of its investigation, the DPA found that the data subjects had neither consented for such use nor were they informed about it by Nos.

Open original source Links to the regulator's original publication or another source.