Merlini s.r.l.
€200,000
Insufficient legal basis for data processing
决定日期
2020年7月13日
权力
Italian Data Protection Authority (Garante)
IT
部门
Industry and Commerce
国家
IT
法律
GDPR现状
FINAL说明
The company had carried out telemarketing activities on behalf of Wind Tre S.p.A. through a third party provider as data processor without sufficient legal basis fpr data processing (Art. 5-7 GDPR) and without sufficient contractual agreements (Art. 28, 29 GDPR) with the third party provider.
法律引文
Art. 5Art. 6Art. 7Art. 28Art. 29
问题与违规
Insufficient legal basis for data processing