Comune di Venezia
€10,000
Non-compliance with general data processing principles
Date de décision
4 août 2025
Autorité
Italian Data Protection Authority (Garante)
IT
Secteur
Public Sector and Education
Pays
IT
Droit
GDPRStatut
FINALDescription
The Italian DPA has imposed a fine of EUR 10,000 on the Comune di Venezia. The controller implemented a tourist tax, which includes exceptions for certain groups of visitors. When determining whether a person was entitled to be excluded from the tourist tax, the controller's data processing did not comply with the basic principles of the GDPR.
Citations légales
Art. 5 (1)Art. 6 (1)Art. 25Art. 32
Questions et violations
Non-compliance with general data processing principles