Nouva Corrente S.r.l.

Summary

The Italian DPA has imposed a fine of EUR 15,000 on Nouva Corrente S.r.l. The controller had hired an agency for telephone marketing purposes. The data subject received two phone calls in the name of the controller: the first from the contractor and the second from the controller themselves. During the call the contractor implied that there might have been a double billing error and stated that the controller would call the data subject. The controller's employee then attempted to conclude a new supply contract. When the data subject requested information about their personal data being processed the controller did not respond adequately. Furthermore the controller did not ensure the legality of the personal data used and provided by the processor nor did they conduct adequate checks on the processor.