# Ermeslink di Giovanni Di Stefano: Insufficient legal basis for data processing

- Type: Enforcement
- Source: Italian Data Protection Authority (Garante)
- Date: 2023-07-18
- Original: https://www.enforcementtracker.com/ETid-2015
- Canonical: https://overview.legal/posts/48130
- Topics: Video Surveillance, IP Address, Personal Data, Processing, Public Authority, Processing Agreement, Supervisory Authorities, Law Enforcement

## Summary

The Italian DPA has fined Ermeslink di Giovanni Di Stefano EUR 5,000. Ermeslink had installed CCTV systems near waste garbage cans on behalf of the municipality of Modica in order to combat illegal waste disposal. During its investigation, the DPA found that Ermeslink processed personal data collected by the cameras without a valid legal basis.

## Full text

The Italian DPA has fined Ermeslink di Giovanni Di Stefano EUR 5,000. Ermeslink had installed CCTV systems near waste garbage cans on behalf of the municipality of Modica in order to combat illegal waste disposal. During its investigation, the DPA found that Ermeslink processed personal data collected by the cameras without a valid legal basis.

GDPR Articles: Art. 5 (1) a) GDPR, Art. 6 GDPR
Industry: Industry and Commerce

---
Generated by overview.legal · https://overview.legal/posts/48130 · 2026-08-22