# Aesse S.r.l.s.: Insufficient legal basis for data processing

- Type: Enforcement
- Source: Italian Data Protection Authority (Garante)
- Date: 2023-03-09
- Original: https://www.enforcementtracker.com/ETid-1805
- Canonical: https://overview.legal/posts/47920
- Topics: Direct Marketing, Controllers, Processing Agreement, Consent, Processing, Data Controller, Supervisory Authorities, Law Enforcement

## Summary

The Italian DPA has imposed a fine of EUR 3,000 on Aesse S.r.l.s.. An individual had filed a complaint with the DPA due to the fact that the controller had made an unsolicited advertising call. The complainant stated that they had never given their consent to receive advertising communication. In addition, the controller failed to adequately comply with their request for information about the origin of their data.

## Full text

The Italian DPA has imposed a fine of EUR 3,000 on Aesse S.r.l.s.. An individual had filed a complaint with the DPA due to the fact that the controller had made an unsolicited advertising call. The complainant stated that they had never given their consent to receive advertising communication. In addition, the controller failed to adequately comply with their request for information about the origin of their data.

GDPR Articles: Art. 5 (1) a) GDPR, Art. 6 (1) a) GDPR, Art. 7 GDPR, Art. 12 GDPR, Art. 13 GDPR, Art. 14 GDPR, Art. 15 GDPR, Art. 130 Codice della privacy
Industry: Industry and Commerce

---
Generated by overview.legal · https://overview.legal/posts/47920 · 2026-08-22