Sirio S.p.A.
€1,000
Insufficient legal basis for data processing
Datum odločitve
7. december 2023
Organ
Italian Data Protection Authority (Garante)
IT
Sektor
Employment
Država
IT
Zakon
GDPRStatus
FINALOpis
The Italian DPA has imposed a fine of EUR 1,000 on Sirio S.p.A.. An employee filed a complaint with the DPA because the controller had passed on their personal data to a bank without their consent and without informing them.
Pravne navedbe
Art. 5 (1)Art. 6Art. 13
Vprašanja in kršitve
Insufficient legal basis for data processing