Energia Verde S.p.A.
€100,000
Non-compliance with general data processing principles
Date de décision
29 avril 2025
Autorité
Italian Data Protection Authority (Garante)
IT
Secteur
Transportation and Energy
Pays
IT
Droit
GDPRStatut
FINALDescription
The Italian DPA has imposed a fine of EUR 100,000 on Energia Verde S.p.A. The controller had been active in direct marketing activities. The controller processed data without a sufficient legal basis, without sufficient technical and organisational measures to ensure data security and without prior and correct identification of the roles of processors and subjects. The controller fruther failed to adequately react to requests from data subjects to exercise their rights, to demonstrate, that the controller processes data in accordance with the GDPR and adequatly cooperating with the DPA.
Citations légales
Art. 5Art. 6Art. 7Art. 12Art. 15Art. 16Art. 17Art. 18Art. 19Art. 20Art. 21Art. 22Art. 24Art. 28Art. 31Art. 58
Questions et violations
Non-compliance with general data processing principles