Italy

Olimpia S.r.l.

100,000 €

GDPR enforcement action by Italian Data Protection Authority (Garante) on 2024-04-11.

Rank · Sector

#61

of 165 in Transportation and Energy

Rank · Italy

#81

of 543

Rank · All fines

#478

of 3,039

Case details

Authority: Italian Data Protection Authority (Garante)
Date: 2024-04-11
Controller / Processor: Olimpia S.r.l.
Sector: Transportation and Energy
Quoted Articles: Art. 5 (1) a), f) GDPR, Art. 5 (2) GDPR, Art. 6 (1) a) GDPR, Art. 24 (1) GDPR, Art. 25 GDPR, Art. 28 GDPR, Art. 32 GDPR
Type of violation: Non-compliance with general data processing principles

Summary

The Italian DPA has imposed a fine of EUR 100,000 on Olimpia S.r.l.. During its investigation, the DPA found that data subjects had received advertising calls on behalf of the controller without their consent or despite being entered in objection registers. The DPA concluded that the controller had failed to take appropriate technical and organisational measures to ensure that the processing of data subjects' personal is carried out in accordance with data protection regulations throughout the supply chain.

Open original source Links to the regulator's original publication or another source.