Cribis Credit Management s.r.l.
€10,000
Insufficient legal basis for data processing
Karar Tarihi
9 Haziran 2022
Otorite
Italian Data Protection Authority (Garante)
IT
Sektör
Finance, Insurance and Consulting
Ülke
IT
Hukuk
GDPRDurum
FINALAçıklama
The Italian DPA has fined Cribis Credit Management s.r.l. EUR 10,000. The company had inadvertently sent an e-mail about late payments on a subscription to the head of the data subject. This allowed the head to gain access to their employee's personal data such as name, surname and payment status information.
Yasal Atıflar
Art. 5 (1)Art. 6
Sorunlar & İhlaller
Insufficient legal basis for data processing