Aesse S.r.l.s.
€3,000
Insufficient legal basis for data processing
Decision Date
March 9, 2023
Authority
Italian Data Protection Authority (Garante)
IT
Sector
Industry and Commerce
Country
IT
Law
GDPRStatus
FINALDescription
The Italian DPA has imposed a fine of EUR 3,000 on Aesse S.r.l.s.. An individual had filed a complaint with the DPA due to the fact that the controller had made an unsolicited advertising call. The complainant stated that they had never given their consent to receive advertising communication. In addition, the controller failed to adequately comply with their request for information about the origin of their data.
Legal Citations
Art. 5 (1)Art. 6 (1)Art. 7Art. 12Art. 13Art. 14Art. 15Art. 130
Issues & Violations
Insufficient legal basis for data processing