Italy

Bees S.r.l.

2,000 €

GDPR enforcement action by Italian Data Protection Authority (Garante) on 2026-09-03.

Rank · Sector

#511

of 657 in Industry and Commerce

Rank · Italy

#570

of 623

Rank · All fines

#2,604

of 3,267

Case details

Authority: Italian Data Protection Authority (Garante)
Date: 2026-09-03
Controller / Processor: Bees S.r.l.
Sector: Industry and Commerce
Quoted Articles: Art. 5 (2) GDPR, Art. 17 GDPR, Art. 21 GDPR
Type of violation: Insufficient fulfilment of data subjects rights

Summary

The Italian DPA has imposed a fine of EUR 2,000 on Bees S.r.l. A data subject had filed a request to object to the processing of their personal data and to have it deleted. The controller confirmed the request. The data subject subsequently received a further 33 marketing emails. It was found that, although the controller had deleted the data subject's personal data from their own database, they had not removed it from their CRM software due to human error. The authority found the request management procedure to be inadequate and stated that the 33 emails did not have a legal basis.

Open original source Links to the regulator's original publication or another source.