Mapei S.p.A.
€15,000
Insufficient legal basis for data processing
Date de décision
4 août 2020
Autorité
Italian Data Protection Authority (Garante)
IT
Secteur
Industry and Commerce
Pays
IT
Droit
GDPRStatut
FINALDescription
The company had left the e-mail account of the data subject active even after the termination of his employment and had automatically forwarded incoming e-mails. The company did not provide sufficient information about this. In addition, the company did not react to claims for access and erasure.
Citations légales
Art. 5Art. 6Art. 12Art. 13Art. 15Art. 17
Questions et violations
Insufficient legal basis for data processing