Made in Italy s.r.l.s.: Insufficient legal basis for data processing

The Italian DPA (Garante) has imposed a fine of EUR 20,000 on Made in Italy s.r.l.s.. A data subject had filed a complaint with the DPA after receiving promotional calls from the data controller, even though they had not consented to it. Even after the data subject had objected to the sending, the controller did not stop the calls. The data subject then requested information about the origin of the data and the deletion of this data. However, the controller did not respond to this request. Also, the controller had not sufficiently cooperated with the DPA in the course of the investigation.

GDPR Articles: Art. 6 GDPR, Art. 7 GDPR, Art. 15 GDPR, Art. 17 GDPR, Art. 21 GDPR, Art. 130 (3) Codice della privacy, Art. 157 Codice della privacy, Art. 166 (2) Codice della privacy
Industry: Industry and Commerce