Altroconsumo Edizioni s.r.l.

Summary

The Italian DPA has imposed a fine of EUR 180,000 on Altroconsumo Edizioni s.r.l. The data subject had received unwanted marketing emails from the controller after a third party entered their email address on the controller's website and provided a falsely spelled surname. The controller could not prove a contract with the data subject, and the only evidence of consent was found to be insufficient. This evidence was a log file that recorded three different spellings of the data subject's surname and contained a Canadian IP address. The controller also shared the data subject's email address with a processor who called them. The data subject objected to the marketing twice, but neither request was answered.