Mas s.r.l.s.
€200,000
Non-compliance with general data processing principles
Decision Date
April 13, 2023
Authority
Italian Data Protection Authority (Garante)
IT
Sector
Industry and Commerce
Country
IT
Law
GDPRStatus
FINALDescription
The Italian DPA has imposed a fine of EUR 200,000 on Mas s.r.l.s.. During its investigation, the DPA found that the controller had acquired illegally created lists containing personal data and used them for marketing purposes without the consent of the data subjects in order to provide them with commercial offers from various energy companies.
Legal Citations
Art. 5 (1)Art. 5 (2)Art. 6Art. 7Art. 13Art. 28Art. 29Art. 30
Issues & Violations
Non-compliance with general data processing principles