Mediacom s.r.l.
Insufficient legal basis for data processing
Päätöspäivä
11. maaliskuuta 2021
Viranomainen
Italian Data Protection Authority (Garante)
IT
Ala
Industry and Commerce
Maa
IT
Laki
GDPRTila
FINALKuvaus
The Italian DPA (Garante) has imposed a fine of EUR 15,000 on Mediacom s.r.l.. The controller carried out advertising calls on behalf of TIM s.p.a.. Several of the calls were made even though the data subjects had not consented, had objected to the advertising calls, or had their numbers on the Robinson list. Garante found that the controller failed to verify the legitimacy of the data in contact lists acquired from third-party companies, as well as to sufficiently ensure that valid consents had been given by the data subjects for corresponding promotional activities.