Comune di Venezia
€10,000
Non-compliance with general data processing principles
Decision Date
4 de agosto de 2025
Authority
Italian Data Protection Authority (Garante)
IT
Sector
Public Sector and Education
Country
IT
Law
GDPRStatus
FINALDescription
The Italian DPA has imposed a fine of EUR 10,000 on the Comune di Venezia. The controller implemented a tourist tax, which includes exceptions for certain groups of visitors. When determining whether a person was entitled to be excluded from the tourist tax, the controller's data processing did not comply with the basic principles of the GDPR.
Legal Citations
Art. 5 (1)Art. 6 (1)Art. 25Art. 32
Issues & Violations
Non-compliance with general data processing principles