Italy

Multiple Companies

18,000 €

GDPR enforcement action by Italian Data Protection Authority (Garante) on 2025-03-27.

Rank · Sector

#175

of 597 in Industry and Commerce

Rank · Italy

#216

of 543

Rank · All fines

#1,137

of 3,050

Case details

Authority: Italian Data Protection Authority (Garante)
Date: 2025-03-27
Controller / Processor: Multiple Companies
Sector: Industry and Commerce
Quoted Articles: Art. 5 (1) a), b) GDPR, Art. 6 (1) a) GDPR, Art. 12 (1) GDPR, Art. 13 GDPR
Type of violation: Insufficient legal basis for data processing

Summary

The Italian DPA imposed fines on 3 companies which ammount to EUR 6,000 each. The fined companies (Powerfit s.s.d.a.r.l., Soleo s.s.d.a.r.l. and Zero Due Villa s.s.d.a.r.l.) run a chain of gyms. The controllers used the phone numbers of customers for direct marketing purposes without the consent of the data subjects. The controllers also failed to respond to respect the data subjects right to deletion.

Open original source Links to the regulator's original publication or another source.