Italy

Mapei S.p.A.

15,000 €

GDPR enforcement action by Italian Data Protection Authority (Garante) on 2020-08-04.

Rank · Sector

#201

of 645 in Industry and Commerce

Rank · Italy

#242

of 613

Rank · All fines

#1,242

of 3,223

Case details

Authority: Italian Data Protection Authority (Garante)
Date: 2020-08-04
Controller / Processor: Mapei S.p.A.
Sector: Industry and Commerce
Quoted Articles: Art. 5 GDPR, Art. 6 GDPR, Art. 12 GDPR, Art. 13 GDPR, Art. 15 GDPR, Art. 17 GDPR
Type of violation: Insufficient legal basis for data processing

Summary

The company had left the e-mail account of the data subject active even after the termination of his employment and had automatically forwarded incoming e-mails. The company did not provide sufficient information about this. In addition, the company did not react to claims for access and erasure.

Open original source Links to the regulator's original publication or another source.