Italy

Eni Plenitude S.p.A.

6,419,631 €

GDPR enforcement action by Italian Data Protection Authority (Garante) on 2024-06-06.

Rank · Sector

of 165 in Transportation and Energy

Rank · Italy

#12

of 543

Rank · All fines

#57

of 3,042

Case details

Authority: Italian Data Protection Authority (Garante)
Date: 2024-06-06
Controller / Processor: Eni Plenitude S.p.A.
Sector: Transportation and Energy
Quoted Articles: Art. 5 (1) a), d), f) GDPR, Art. 5 (2) GDPR, Art. 6 GDPR, Art. 24 GDPR, Art. 25 GDPR, Art. 28 GDPR, Art. 130 Codice della privacy
Type of violation: Non-compliance with general data processing principles

Summary

The Italian DPA has imposed a fine of EUR 6.419.631 on Eni Plenitude S.p.A.. The DPA initiated an investigation against the controller due to 107 notifications and 8 complaints from data subjects regarding undesired marketing calls. It found that the controller had repeatedly called data subjects without their consent or registration in the national opt-out register. The DPA also found that a large number of the contracts concluded resulted from the illegal calls. The high number of unauthorized advertising calls was mainly due to the controller's lack of control over its contracted advertising agencies.

Open original source Links to the regulator's original publication or another source.