Italy

Tiscali Italia SpA

100,000 €

GDPR enforcement action by Italian Data Protection Authority (Garante) on 2023-07-18.

Rank · Sector

#76

of 595 in Industry and Commerce

Rank · Italy

#78

of 543

Rank · All fines

#475

of 3,042

Case details

Authority: Italian Data Protection Authority (Garante)
Date: 2023-07-18
Controller / Processor: Tiscali Italia SpA
Sector: Industry and Commerce
Quoted Articles: Art. 5 (1) a), b), c), e) GDPR, Art. 5 (2) GDPR, Art. 12 (1) GDPR, Art. 13 (1) a) GDPR, Art. 24 GDPR, Art. 130 Codice della privacy
Type of violation: Non-compliance with general data processing principles

Summary

The Italian DPA has imposed a fine of EUR 100,000 on Tiscali Italia SpA. The controller had sent advertising messages to more than 160,000 customers within four months, even though they had not given their consent and there was also no other valid legal basis. The DPA also found that the controller had not sufficiently fulfilled its information obligations. For example, there was a lack of information on the retention period for personal data processed for marketing purposes.

Open original source Links to the regulator's original publication or another source.