Italy

Mapei S.p.A.

15,000 €

GDPR enforcement action by Italian Data Protection Authority (Garante) on 2020-08-04.

Rank · Sector

#186

of 608 in Industry and Commerce

Rank · Italy

#223

of 555

Rank · All fines

#1,191

of 3,085

Case details

Authority: Italian Data Protection Authority (Garante)
Date: 2020-08-04
Controller / Processor: Mapei S.p.A.
Sector: Industry and Commerce
Quoted Articles: Art. 5 GDPR, Art. 6 GDPR, Art. 12 GDPR, Art. 13 GDPR, Art. 15 GDPR, Art. 17 GDPR
Type of violation: Insufficient legal basis for data processing

Summary

The company had left the e-mail account of the data subject active even after the termination of his employment and had automatically forwarded incoming e-mails. The company did not provide sufficient information about this. In addition, the company did not react to claims for access and erasure.

Open original source Links to the regulator's original publication or another source.