Italy

Multiple Companies

18,000 €

GDPR enforcement action by Italian Data Protection Authority (Garante) on 2025-03-27.

Rank · Sector

#176

of 599 in Industry and Commerce

Rank · Italy

#216

of 543

Rank · All fines

#1,142

of 3,059

Case details

Authority: Italian Data Protection Authority (Garante)
Date: 2025-03-27
Controller / Processor: Multiple Companies
Sector: Industry and Commerce
Quoted Articles: Art. 5 (1) a), b) GDPR, Art. 6 (1) a) GDPR, Art. 12 (1) GDPR, Art. 13 GDPR
Type of violation: Insufficient legal basis for data processing

Summary

The Italian DPA imposed fines on 3 companies which ammount to EUR 6,000 each. The fined companies (Powerfit s.s.d.a.r.l., Soleo s.s.d.a.r.l. and Zero Due Villa s.s.d.a.r.l.) run a chain of gyms. The controllers used the phone numbers of customers for direct marketing purposes without the consent of the data subjects. The controllers also failed to respond to respect the data subjects right to deletion.

Open original source Links to the regulator's original publication or another source.