Italy

Depurazione Acqua S.r.l.

15,000 €

GDPR enforcement action by Italian Data Protection Authority (Garante) on 2026-02-12.

Rank · Sector

#198

of 608 in Industry and Commerce

Rank · Italy

#238

of 555

Rank · All fines

#1,235

of 3,085

Case details

Authority: Italian Data Protection Authority (Garante)
Date: 2026-02-12
Controller / Processor: Depurazione Acqua S.r.l.
Sector: Industry and Commerce
Quoted Articles: Art. 4 GDPR, Art. 5 GDPR, Art. 6 GDPR, Art. 7 GDPR, Art. 24 GDPR, Art. 28 GDPR
Type of violation: Insufficient legal basis for data processing

Summary

The Italian DPA has imposed a fine of EUR 15,000 on Depurazione Acqua S.r.l. The controller contacted a data subject in the context of direct marketing activities despite the data subject being registered in the Public Register of Objections. Therefore, the controller processed the data subject's data without a sufficient legal basis. Additionally, the controller failed to exercise sufficient control over the data providers used to obtain the data for direct marketing activities. The controller obtained data from Unleadmited S.r.l., which had already been fined for obtaining data without a sufficient legal basis (ETid: 3084).

Open original source Links to the regulator's original publication or another source.