Merlini s.r.l.
€200,000
Insufficient legal basis for data processing
Decision Date
13 de julho de 2020
Authority
Italian Data Protection Authority (Garante)
IT
Sector
Industry and Commerce
Country
IT
Law
GDPRStatus
FINALDescription
The company had carried out telemarketing activities on behalf of Wind Tre S.p.A. through a third party provider as data processor without sufficient legal basis fpr data processing (Art. 5-7 GDPR) and without sufficient contractual agreements (Art. 28, 29 GDPR) with the third party provider.
Legal Citations
Art. 5Art. 6Art. 7Art. 28Art. 29
Issues & Violations
Insufficient legal basis for data processing