Enforcement · Italian Data Protection Authority (Garante) EN LLM context A cited markdown file you can paste into your AI assistant (ChatGPT, Claude, a RAG or project knowledge base) to ground it in this document. Contains: this document’s text, its sections with their topics, and the full text of every law provision it applies. Everything links back to its source on overview.legal — legal information, not advice.

Aesse S.r.l.s.: Insufficient legal basis for data processing

The Italian DPA has imposed a fine of EUR 3,000 on Aesse S.r.l.s..

€3,000 Fine
Aesse S.r.l.s.
ITALY
Art. 5 GDPR Art. 6 GDPR Art. 7 GDPR Art. 12 GDPR Art. 13 GDPR Art. 14 GDPR Art. 15 GDPR Art. 130 GDPR
Consent Controllers Supervisory Authorities Processing Direct Marketing
Mar 9, 2023 Source gpdp.it

Full text

The Italian DPA has imposed a fine of EUR 3,000 on Aesse S.r.l.s.. An individual had filed a complaint with the DPA due to the fact that the controller had made an unsolicited advertising call. The complainant stated that they had never given their consent to receive advertising communication. In addition, the controller failed to adequately comply with their request for information about the origin of their data.

Industry: Industry and Commerce

How it connects

References

All 9

Related across sources

C-507/17 Google LLC v CNIL C-507/17 (Google Territorial Scope) Sep 24, 2019 Territorial scope (GDPR) Right to be Forgotten Direct Marketing
HvJ EU 9 januari 2025, C‑394/23 (Mousse) Artikelen: 5(1)(c), 6(1), en 21 AVG Onderwerp : Beginsel van minimale gegevensverwerking Gek genoeg verwijst het HvJ EU zelf niet naar HvJ EU 1 augustus 2022, C‑184/20… HvJ EU 9 januari 2025, C‑394/23 (Mousse). Jan 9, 2025 IP Address Retention Period Identification
C-210/16 Unabhängiges Landeszentrum für Datenschutz v Wirtschaftsakademie Schleswig-Holstein C-210/16 (Wirtschaftsakademie) Jun 5, 2018 IP Address Controllers Processors
C-129/21 Proximus NV v Gegevensbeschermingsautoriteit In a preliminary ruling requested by the Brussels Court of Appeal, the Court of Justice of the European Union addressed the interpretation of Article 12 of Directive 2002/58/EC… Fourth Chamber Oct 27, 2022 Telecommunications Right to be Forgotten Personal Data
C-131/12 Google Spain SL and Google Inc. v AEPD and Mario Costeja González C-131/12 (Google Spain) May 13, 2014 IP Address Material scope (GDPR) Personal Data
C-252/21 Meta Platforms v noyb C-252/21 (Meta Platforms (noyb)) Jan 12, 2023 Supervisory Authorities IP Address Supervision
Related documents