Made in Italy s.r.l.s.
€20,000
Insufficient legal basis for data processing
Decision Date
April 7, 2022
Authority
Italian Data Protection Authority (Garante)
IT
Sector
Industry and Commerce
Country
IT
Law
GDPRStatus
FINALDescription
The Italian DPA (Garante) has imposed a fine of EUR 20,000 on Made in Italy s.r.l.s.. A data subject had filed a complaint with the DPA after receiving promotional calls from the data controller, even though they had not consented to it. Even after the data subject had objected to the sending, the controller did not stop the calls. The data subject then requested information about the origin of the data and the deletion of this data. However, the controller did not respond to this request. Also, the controller had not sufficiently cooperated with the DPA in the course of the investigation.
Legal Citations
Art. 6Art. 7Art. 15Art. 17Art. 21Art. 130 (3)Art. 157Art. 166 (2)
Issues & Violations
Insufficient legal basis for data processing