Eni Plenitude S.p.A.
€6,419,631
Non-compliance with general data processing principles
Date de décision
6 juin 2024
Autorité
Italian Data Protection Authority (Garante)
IT
Secteur
Transportation and Energy
Pays
IT
Droit
GDPRStatut
FINALDescription
The Italian DPA has imposed a fine of EUR 6.419.631 on Eni Plenitude S.p.A.. The DPA initiated an investigation against the controller due to 107 notifications and 8 complaints from data subjects regarding undesired marketing calls. It found that the controller had repeatedly called data subjects without their consent or registration in the national opt-out register. The DPA also found that a large number of the contracts concluded resulted from the illegal calls. The high number of unauthorized advertising calls was mainly due to the controller's lack of control over its contracted advertising agencies.
Citations légales
Art. 5 (1)Art. 5 (2)Art. 6Art. 24Art. 25Art. 28Art. 130
Questions et violations
Non-compliance with general data processing principles