Mediacom s.r.l.
Insufficient legal basis for data processing
Fecha de la decisión
11 de marzo de 2021
Autoridad
Italian Data Protection Authority (Garante)
IT
Sector
Industry and Commerce
País
IT
Ley
GDPREstado
FINALDescripción
The Italian DPA (Garante) has imposed a fine of EUR 15,000 on Mediacom s.r.l.. The controller carried out advertising calls on behalf of TIM s.p.a.. Several of the calls were made even though the data subjects had not consented, had objected to the advertising calls, or had their numbers on the Robinson list. Garante found that the controller failed to verify the legitimacy of the data in contact lists acquired from third-party companies, as well as to sufficiently ensure that valid consents had been given by the data subjects for corresponding promotional activities.