# Cosmopol Security S.p.A.: Insufficient fulfilment of data subjects rights

- Type: Enforcement
- Source: Italian Data Protection Authority (Garante)
- Date: 2022-08-05
- Original: https://www.enforcementtracker.com/ETid-1442
- Canonical: https://overview.legal/posts/47557
- Topics: Personal Data, Controllers, IP Address, Processing Agreement, Supervisory Authorities, Data Controller, Law Enforcement, Security

## Summary

The Italian DPA has fined Cosmopol Security S.p.A. EUR 20,000. An individual had filed a complaint with the DPA against the controller. The individual had received invoices without ever having had a contractual relationship with the company. Therefore, the data subject requested information on the origin of their personal data. However, the controller did not respond to the data subject's request for information in a timely manner.

## Full text

The Italian DPA has fined Cosmopol Security S.p.A. EUR 20,000. An individual had filed a complaint with the DPA against the controller. The individual had received invoices without ever having had a contractual relationship with the company. Therefore, the data subject requested information on the origin of their personal data. However, the controller did not respond to the data subject's request for information in a timely manner.

GDPR Articles: Art. 12 (3) GDPR, Art. 15 GDPR
Industry: Industry and Commerce

---
Generated by overview.legal · https://overview.legal/posts/47557 · 2026-08-22