Gaypa s.r.l.
€20,000
Non-compliance with general data processing principles
Datum odločitve
29. oktober 2020
Organ
Italian Data Protection Authority (Garante)
IT
Sektor
Employment
Država
IT
Zakon
GDPRStatus
FINALOpis
The Italian DPA (Garante) imposed a fine of EUR 20,000 on Gaypa s.r.l.. The controller had kept a former employee's email account active and had access to the data subject's correspondence, despite the termination of his/her employment. The data subject had not been informed about such a further use of his/her e-mail account, as well as about the storage of all incoming and outgoing e-mails on the company servers and the related processing of his/her personal data.
Pravne navedbe
Art. 5 (1)Art. 12Art. 13
Vprašanja in kršitve
Non-compliance with general data processing principles