Scionti Selezioni Superiori S.r.l.: Non-compliance with general data processing principles

The Italian DPA has imposed a fine of EUR 70,000 on Scionti Selezioni Superiori S.r.l.. The controller had made unsolicited marketing calls, in some cases to individuals who were registered in opt-out registers or had not given their consent. The DPA found that the controller had failed to implement appropriate technical and organizational measures to ensure that the processing of the data subjects' personal data was lawful, for example by checking whether the data subjects were registered in an opt-out register. In addition, the controller failed to provide the data subject with sufficient information on the processing of their personal data, such as information on data subject rights.

GDPR Articles: Art. 5 (1) a) GDPR, Art. 5 (2) GDPR, Art. 6 GDPR, Art. 7 GDPR, Art. 12 GDPR, Art. 13 GDPR, Art. 15 GDPR, Art. 21 GDPR, Art. 24 (1), (2) GDPR, Art. 25 GDPR, Art. 130 Codice della privacy
Industry: Industry and Commerce