Enforcement · Italian Data Protection Authority (Garante) EN LLM context A cited markdown file you can paste into your AI assistant (ChatGPT, Claude, a RAG or project knowledge base) to ground it in this document. Contains: this document’s text, its sections with their topics, and the full text of every law provision it applies. Everything links back to its source on overview.legal — legal information, not advice.
Planet Group Spa: Insufficient legal basis for data processing
How it connects
Related across sources
Case Law Google LLC v CNIL Case Law Google Spain SL and Google Inc. v AEPD and Mario Costeja González Case Law GOOGLE SPAIN SL V. AEPD (THE DPA) & MARIO COSTEJA GONZALEZ, 13.May.2014 (“GOOGLE v. Spain”) Case Law CJEU Bavarian Lager: Disclosing personal data in access-to-documents requests is Case Law HvJ EU 9 januari 2025, C‑394/23 (Mousse). Guidance Guidelines 07/2022 on certification as a tool for transfers
Full text
The Italian DPA (Garante) has imposed a fine of EUR 80,000 on Planet Group Spa. The controller made promotional calls on behalf of TIM s.p.a.. Several of these calls were made even though the data subjects had not consented or had objected to the calls. Garante found that the controller had contacted a total of 47,981 telephone numbers without consent or legal basis. In addition, Garante highlighted that the controller had not respected the data subjects' right to object. In one case, a user had been contacted 155 times in one month, even though he had exercised his right to object.
Industry: Industry and Commerce
Original document at the source www.garanteprivacy.it