Aesse S.r.l.s.: Insufficient legal basis for data processing

The Italian DPA has imposed a fine of EUR 3,000 on Aesse S.r.l.s.. An individual had filed a complaint with the DPA due to the fact that the controller had made an unsolicited advertising call. The complainant stated that they had never given their consent to receive advertising communication. In addition, the controller failed to adequately comply with their request for information about the origin of their data.

GDPR Articles: Art. 5 (1) a) GDPR, Art. 6 (1) a) GDPR, Art. 7 GDPR, Art. 12 GDPR, Art. 13 GDPR, Art. 14 GDPR, Art. 15 GDPR, Art. 130 Codice della privacy
Industry: Industry and Commerce