Eni Plenitude S.p.A.
€6,419,631
Non-compliance with general data processing principles
Decision Date
June 6, 2024
Authority
Italian Data Protection Authority (Garante)
IT
Sector
Transportation and Energy
Country
IT
Law
GDPRStatus
FINALDescription
The Italian DPA has imposed a fine of EUR 6.419.631 on Eni Plenitude S.p.A.. The DPA initiated an investigation against the controller due to 107 notifications and 8 complaints from data subjects regarding undesired marketing calls. It found that the controller had repeatedly called data subjects without their consent or registration in the national opt-out register. The DPA also found that a large number of the contracts concluded resulted from the illegal calls. The high number of unauthorized advertising calls was mainly due to the controller's lack of control over its contracted advertising agencies.
Legal Citations
Art. 5 (1)Art. 5 (2)Art. 6Art. 24Art. 25Art. 28Art. 130
Issues & Violations
Non-compliance with general data processing principles