Merlini s.r.l.
€200,000
Insufficient legal basis for data processing
Fecha de la decisión
13 de julio de 2020
Autoridad
Italian Data Protection Authority (Garante)
IT
Sector
Industry and Commerce
País
IT
Ley
GDPREstado
FINALDescripción
The company had carried out telemarketing activities on behalf of Wind Tre S.p.A. through a third party provider as data processor without sufficient legal basis fpr data processing (Art. 5-7 GDPR) and without sufficient contractual agreements (Art. 28, 29 GDPR) with the third party provider.
Citas legales
Art. 5Art. 6Art. 7Art. 28Art. 29
Problemas e infracciones
Insufficient legal basis for data processing