Mapei S.p.A.
€15,000
Insufficient legal basis for data processing
Decision Date
4 de agosto de 2020
Authority
Italian Data Protection Authority (Garante)
IT
Sector
Industry and Commerce
Country
IT
Law
GDPRStatus
FINALDescription
The company had left the e-mail account of the data subject active even after the termination of his employment and had automatically forwarded incoming e-mails. The company did not provide sufficient information about this. In addition, the company did not react to claims for access and erasure.
Legal Citations
Art. 5Art. 6Art. 12Art. 13Art. 15Art. 17
Issues & Violations
Insufficient legal basis for data processing