Mediacom s.r.l.
Insufficient legal basis for data processing
Decision Date
March 11, 2021
Authority
Italian Data Protection Authority (Garante)
IT
Sector
Industry and Commerce
Country
IT
Law
GDPRStatus
FINALDescription
The Italian DPA (Garante) has imposed a fine of EUR 15,000 on Mediacom s.r.l.. The controller carried out advertising calls on behalf of TIM s.p.a.. Several of the calls were made even though the data subjects had not consented, had objected to the advertising calls, or had their numbers on the Robinson list. Garante found that the controller failed to verify the legitimacy of the data in contact lists acquired from third-party companies, as well as to sufficiently ensure that valid consents had been given by the data subjects for corresponding promotional activities.