Nos s.r.l.s.
€20,000
Insufficient legal basis for data processing
Decision Date
April 28, 2022
Authority
Italian Data Protection Authority (Garante)
IT
Sector
Industry and Commerce
Country
IT
Law
GDPRStatus
FINALDescription
The Italian DPA fined Nos s.r.l.s. in the amount EUR 20,000. Nos acted as a processor for Vodafone and did advertising for the telecommunications company. For this purpose, Nos had acquired as well as processed personal data from the companies Kdata ltd. and Dynamic Web Solution ltd. In the course of its investigation, the DPA found that the data subjects had neither consented for such use nor were they informed about it by Nos.
Legal Citations
Art. 5 (1)Art. 6Art. 7Art. 13Art. 14
Issues & Violations
Insufficient legal basis for data processing