Merlini s.r.l.
€200,000
Insufficient legal basis for data processing
決定日期
2020年7月13日
權限
Italian Data Protection Authority (Garante)
IT
部門
Industry and Commerce
國家
IT
法律
GDPR狀態
FINAL說明
The company had carried out telemarketing activities on behalf of Wind Tre S.p.A. through a third party provider as data processor without sufficient legal basis fpr data processing (Art. 5-7 GDPR) and without sufficient contractual agreements (Art. 28, 29 GDPR) with the third party provider.
法律引文
Art. 5Art. 6Art. 7Art. 28Art. 29
問題與違規
Insufficient legal basis for data processing