Italy

Fastweb S.p.A.

1,000,000 €

GDPR enforcement action by Italian Data Protection Authority (Garante) on 2024-06-20.

Rank · Sector

#49

of 366 in Media, Telecoms and Broadcasting

Rank · Italy

#31

of 543

Rank · All fines

#171

of 3,042

Case details

Authority: Italian Data Protection Authority (Garante)
Date: 2024-06-20
Controller / Processor: Fastweb S.p.A.
Sector: Media, Telecoms and Broadcasting
Quoted Articles: Art. 5 (1) a), c), e) GDPR, Art. 5 (2) GDPR, Art. 6 GDPR, Art. 7 GDPR, Art. 12 (1), (3) GDPR, Art. 13 GDPR, Art. 15 GDPR, Art. 16 GDPR, Art. 17 GDPR, Art. 18 GDPR, Art. 19 GDPR, Art. 20 GDPR, Art. 21 GDPR, Art. 22 GDPR, Art. 24 (1) GDPR, Art. 25 GDPR, Art. 130 Codice della privacy
Type of violation: Non-compliance with general data processing principles

Summary

The Italian DPA has imposed a fine of EUR 1 million on Fastweb S.p.A. due to unauthorized telemarketing, the unlawful storage of customer data after contract termination, and inadequate responses to data deletion requests. Fastweb made marketing calls to individuals listed in the public objection register and used customer data for advertising purposes for up to 24 months after contract termination—without a legal basis. Additionally, affected customers often received delayed responses to their data protection inquiries.

Open original source Links to the regulator's original publication or another source.