Enforcement · Italian Data Protection Authority (Garante) EN LLM context A cited markdown file you can paste into your AI assistant (ChatGPT, Claude, a RAG or project knowledge base) to ground it in this document. Contains: this document’s text, its sections with their topics, and the full text of every law provision it applies. Everything links back to its source on overview.legal — legal information, not advice.

Flowbird Italia s.r.l.: Non-compliance with general data processing principles

The Italian DPA (Garante) has imposed a fine of EUR 30,000 on Flowbird Italia s.r.l..

€30,000 Fine
Flowbird Italia s.r.l.
ITALY
Art. 5 GDPR Art. 6 GDPR Art. 30 GDPR
Supervisory Authorities Processing Fines
Jul 22, 2021 Source gpdp.it

Full text

The Italian DPA (Garante) has imposed a fine of EUR 30,000 on Flowbird Italia s.r.l.. The Garante had launched an investigation following a complaint from an individual who had complained about the new parking meters that were installed in the city of Rome in 2018. In fact, the company Atac s.p.a., which was also contracted by the city to manage the parking lots, had initiated a technical upgrade of the parking meters in order to offer new services (e.g., the payment of fines/fees or the purchase/renewal of public transport tickets) and introduce new payment methods that also take into account the vehicle's license plate number. Part of the equipment was supplied by Flowbird Italia s.r.l. All parking information was then managed through a centralized system, which could also be accessed through an app by the employees responsible for controlling parking fees. During the investigation the DPA found that Flowbird Italia had not established a data processing register.

Industry: Industry and Commerce

How it connects

References

Related across sources

C-807/21 Deutsche Wohnen SE v Staatsanwaltschaft Berlin C-807/21 (Deutsche Wohnen) CJEU Dec 5, 2023 Fines Public Authority Processors
C-383/23 Criminal proceedings against ILVA A/S The Court of Justice of the European Union ruled on a preliminary reference from the Danish High Court in criminal proceedings against ILVA A/S, addressing whether the GDPR… CJEU ·Fifth Chamber Feb 13, 2025 Fines Controllers Processors
C-768/21 TR v Land Hessen In Case C-768/21, the Court of Justice of the European Union (First Chamber) ruled on a preliminary reference from the Verwaltungsgericht Wiesbaden concerning TR's challenge of… CJEU ·First Chamber Sep 26, 2024 Supervision Data Breaches Integrity and Confidentiality Principle
Guidelines 04/2026 application of the power to impose administrative fines in relation to other corrective powers under the GDPR Guidelines ·EDPB Sep 17, 2026 Fines Authority Powers for Fundamental Rights Protection Supervision
C-741/21 GP v juris GmbH In Case C-741/21, the Court of Justice of the European Union (Third Chamber) addressed a preliminary reference from the Landgericht Saarbrücken in proceedings between data subject… CJEU ·Third Chamber Apr 11, 2024 Liability Personal Data Integrity and Confidentiality Principle
Guidelines 04/2022 calculation of administrative fines under the GDPR Guidelines ·EDPB May 24, 2023 Fines Notified Body Reporting and Notification Obligations Supervision
Related documents