Italy

Aimag S.p.A.

300,000 €

GDPR enforcement action by Italian Data Protection Authority (Garante) on 2025-11-27.

Rank · Sector

#43

of 165 in Transportation and Energy

Rank · Italy

#54

of 543

Rank · All fines

#303

of 3,042

Case details

Authority: Italian Data Protection Authority (Garante)
Date: 2025-11-27
Controller / Processor: Aimag S.p.A.
Sector: Transportation and Energy
Quoted Articles: Art. 5 (1) e) GDPR, Art. 6 GDPR, Art. 7 GDPR, Art. 13 GDPR, Art. 24 GDPR, Art. 25 GDPR, Art. 32 GDPR
Type of violation: Non-compliance with general data processing principles

Summary

The Italian DPA has imposed a fine of EUR 300,000 on Aimag S.p.A. The controller offered its customers a service that allowed them to view their consumption data on the controller's website, but the log-in procedure was insufficient. The way the controller gained consent for the use of promotional messages was also inadequate.

Open original source Links to the regulator's original publication or another source.