Mediacom s.r.l.
Insufficient legal basis for data processing
Otsuse kuupäev
11. märts 2021
Ametiasutus
Italian Data Protection Authority (Garante)
IT
Sektor
Industry and Commerce
Riik
IT
Seadus
GDPRStaatus
FINALKirjeldus
The Italian DPA (Garante) has imposed a fine of EUR 15,000 on Mediacom s.r.l.. The controller carried out advertising calls on behalf of TIM s.p.a.. Several of the calls were made even though the data subjects had not consented, had objected to the advertising calls, or had their numbers on the Robinson list. Garante found that the controller failed to verify the legitimacy of the data in contact lists acquired from third-party companies, as well as to sufficiently ensure that valid consents had been given by the data subjects for corresponding promotional activities.