Gaypa s.r.l.
€20,000
Non-compliance with general data processing principles
Date de décision
29 octobre 2020
Autorité
Italian Data Protection Authority (Garante)
IT
Secteur
Employment
Pays
IT
Droit
GDPRStatut
FINALDescription
The Italian DPA (Garante) imposed a fine of EUR 20,000 on Gaypa s.r.l.. The controller had kept a former employee's email account active and had access to the data subject's correspondence, despite the termination of his/her employment. The data subject had not been informed about such a further use of his/her e-mail account, as well as about the storage of all incoming and outgoing e-mails on the company servers and the related processing of his/her personal data.
Citations légales
Art. 5 (1)Art. 12Art. 13
Questions et violations
Non-compliance with general data processing principles