Gaypa s.r.l.
€20,000
Non-compliance with general data processing principles
Fecha de la decisión
29 de octubre de 2020
Autoridad
Italian Data Protection Authority (Garante)
IT
Sector
Employment
País
IT
Ley
GDPREstado
FINALDescripción
The Italian DPA (Garante) imposed a fine of EUR 20,000 on Gaypa s.r.l.. The controller had kept a former employee's email account active and had access to the data subject's correspondence, despite the termination of his/her employment. The data subject had not been informed about such a further use of his/her e-mail account, as well as about the storage of all incoming and outgoing e-mails on the company servers and the related processing of his/her personal data.
Citas legales
Art. 5 (1)Art. 12Art. 13
Problemas e infracciones
Non-compliance with general data processing principles