# Nos s.r.l.s.: Insufficient legal basis for data processing

- Type: Enforcement
- Source: Italian Data Protection Authority (Garante)
- Date: 2022-04-28
- Original: https://www.enforcementtracker.com/ETid-1232
- Canonical: https://overview.legal/posts/47347
- Topics: Personal Data, Processors, Direct Marketing, Controllers, Processing Agreement, Telecommunications, Processing, Consent, Data Processor, Supervisory Authorities

## Summary

The Italian DPA fined Nos s.r.l.s. in the amount EUR 20,000. Nos acted as a processor for Vodafone and did advertising for the telecommunications company. For this purpose, Nos had acquired as well as processed personal data from the companies Kdata ltd. and Dynamic Web Solution ltd. In the course of its investigation, the DPA found that the data subjects had neither consented for such use nor were they informed about it by Nos.

## Full text

The Italian DPA fined Nos s.r.l.s. in the amount EUR 20,000. Nos acted as a processor for Vodafone and did advertising for the telecommunications company. For this purpose, Nos had acquired as well as processed personal data from the companies Kdata ltd. and Dynamic Web Solution ltd. In the course of its investigation, the DPA found that the data subjects had neither consented for such use nor were they informed about it by Nos.

GDPR Articles: Art. 5 (1) a) GDPR, Art. 6 GDPR, Art. 7 GDPR, Art. 13 GDPR, Art. 14 GDPR
Industry: Industry and Commerce

---
Generated by overview.legal · https://overview.legal/posts/47347 · 2026-08-22