Noi Compriamo Auto.it S.r.l.
€45,000
Non-compliance with general data processing principles
Decision Date
June 4, 2025
Authority
Italian Data Protection Authority (Garante)
IT
Sector
Industry and Commerce
Country
IT
Law
GDPRStatus
FINALDescription
The Italian DPA has imposed a fine of EUR 45,000 on Noi Compriamo Auto.it S.r.l. The controller contacted the data subject multiple times for direct marketing purposes via different email addresses. The controller had no legal basis for the processing and failed to implement sufficient technical and organizational measures to demonstrate its lawfulness. Additionally, the controller failed to allow the data subject to easily exercise his rights.
Legal Citations
Art. 5 (2)Art. 6 (1)Art. 12 (2)Art. 24Art. 28
Issues & Violations
Non-compliance with general data processing principles