Italy

Multiple Companies

18,000 €

GDPR enforcement action by Italian Data Protection Authority (Garante) on 2025-03-27.

Rank · Sector

#180

of 608 in Industry and Commerce

Rank · Italy

#219

of 555

Rank · All fines

#1,151

of 3,085

Case details

Authority: Italian Data Protection Authority (Garante)
Date: 2025-03-27
Controller / Processor: Multiple Companies
Sector: Industry and Commerce
Quoted Articles: Art. 5 (1) a), b) GDPR, Art. 6 (1) a) GDPR, Art. 12 (1) GDPR, Art. 13 GDPR
Type of violation: Insufficient legal basis for data processing

Summary

The Italian DPA imposed fines on 3 companies which ammount to EUR 6,000 each. The fined companies (Powerfit s.s.d.a.r.l., Soleo s.s.d.a.r.l. and Zero Due Villa s.s.d.a.r.l.) run a chain of gyms. The controllers used the phone numbers of customers for direct marketing purposes without the consent of the data subjects. The controllers also failed to respond to respect the data subjects right to deletion.

Open original source Links to the regulator's original publication or another source.