Cosmopol Security S.p.A.
€20,000
Insufficient fulfilment of data subjects rights
Decision Date
August 5, 2022
Authority
Italian Data Protection Authority (Garante)
IT
Sector
Industry and Commerce
Country
IT
Law
GDPRStatus
FINALDescription
The Italian DPA has fined Cosmopol Security S.p.A. EUR 20,000. An individual had filed a complaint with the DPA against the controller. The individual had received invoices without ever having had a contractual relationship with the company. Therefore, the data subject requested information on the origin of their personal data. However, the controller did not respond to the data subject's request for information in a timely manner.
Legal Citations
Art. 12 (3)Art. 15
Issues & Violations
Insufficient fulfilment of data subjects rights