Italy

Planet Group Spa

80,000 €

GDPR enforcement action by Italian Data Protection Authority (Garante) on 2021-03-11.

Rank · Sector

#85

of 597 in Industry and Commerce

Rank · Italy

#89

of 543

Rank · All fines

#529

of 3,050

Case details

Authority: Italian Data Protection Authority (Garante)
Date: 2021-03-11
Controller / Processor: Planet Group Spa
Sector: Industry and Commerce
Quoted Articles: Art. 5 (1) a) GDPR, Art. 6 (1) GDPR, Art. 21 (2), (3) GDPR, Art. 12 (3) GDPR, Art. 25 (1) GDPR
Type of violation: Insufficient legal basis for data processing

Summary

The Italian DPA (Garante) has imposed a fine of EUR 80,000 on Planet Group Spa. The controller made promotional calls on behalf of TIM s.p.a.. Several of these calls were made even though the data subjects had not consented or had objected to the calls. Garante found that the controller had contacted a total of 47,981 telephone numbers without consent or legal basis. In addition, Garante highlighted that the controller had not respected the data subjects' right to object. In one case, a user had been contacted 155 times in one month, even though he had exercised his right to object.

Open original source Links to the regulator's original publication or another source.