Tiscali Italia SpA
€100,000
Non-compliance with general data processing principles
Decision Date
July 18, 2023
Authority
Italian Data Protection Authority (Garante)
IT
Sector
Industry and Commerce
Country
IT
Law
GDPRStatus
FINALDescription
The Italian DPA has imposed a fine of EUR 100,000 on Tiscali Italia SpA. The controller had sent advertising messages to more than 160,000 customers within four months, even though they had not given their consent and there was also no other valid legal basis. The DPA also found that the controller had not sufficiently fulfilled its information obligations. For example, there was a lack of information on the retention period for personal data processed for marketing purposes.
Legal Citations
Art. 5 (1)Art. 5 (2)Art. 12 (1)Art. 13 (1)Art. 24Art. 130
Issues & Violations
Non-compliance with general data processing principles