Italy

Mapei S.p.A.

15,000 €

GDPR enforcement action by Italian Data Protection Authority (Garante) on 2020-08-04.

Rank · Sector

#181

of 597 in Industry and Commerce

Rank · Italy

#220

of 543

Rank · All fines

#1,177

of 3,050

Case details

Authority: Italian Data Protection Authority (Garante)
Date: 2020-08-04
Controller / Processor: Mapei S.p.A.
Sector: Industry and Commerce
Quoted Articles: Art. 5 GDPR, Art. 6 GDPR, Art. 12 GDPR, Art. 13 GDPR, Art. 15 GDPR, Art. 17 GDPR
Type of violation: Insufficient legal basis for data processing

Summary

The company had left the e-mail account of the data subject active even after the termination of his employment and had automatically forwarded incoming e-mails. The company did not provide sufficient information about this. In addition, the company did not react to claims for access and erasure.

Open original source Links to the regulator's original publication or another source.