Ediscom S.p.a.

€300,000

Non-compliance with general data processing principles

Ημερομηνία απόφασης

23 Φεβρουαρίου 2023

Αρχή

Italian Data Protection Authority (Garante)

IT

Τομέας

Industry and Commerce

Χώρα

IT

Νόμος

GDPR

Κατάσταση

FINAL

Περιγραφή

The Italian DPA has imposed a fine of EUR 300,000 on Ediscom S.p.a.. The marketing company had collected data from 21 million individuals via various online portals in order to use them for marketing activities. The company also used so-called 'dark patterns' to mislead users into consenting to the processing of their data for marketing purposes and to the transfer of their data to third parties. The DPA found a number of other violations, including that in some cases of data processing, the company was unable to demonstrate that it had obtained the consent of data subjects for this.

Νομικές παραπομπές

Art. 5 (1)Art. 6Art. 7Art. 14Art. 25Art. 130

Θέματα & Παραβάσεις

Non-compliance with general data processing principles

Μείνετε ενημερωμένοι για την επιβολή του απορρήτου

Σεβόμαστε την ιδιωτικότητά σας. Ένα email ανά μήνα, χωρίς spam, διαγραφή ανά πάσα στιγμή.