Enforcement · Italian Data Protection Authority (Garante) EN LLM context A cited markdown file you can paste into your AI assistant (ChatGPT, Claude, a RAG or project knowledge base) to ground it in this document. Contains: this document’s text, its sections with their topics, and the full text of every law provision it applies. Everything links back to its source on overview.legal — legal information, not advice.

Azienda Trasporto Passeggeri Emilia-Romagna S.p.A.: Non-compliance with general data processing principles

€50,000 Fine
Azienda Trasporto Passeggeri Emilia-Romagna S.p.A.
ITALY
Art. 5 GDPR Art. 6 GDPR Art. 7 GDPR Art. 12 GDPR Art. 13 GDPR Art. 21 GDPR Art. 130 GDPR
Right to Object Direct Marketing Marketing Data Subject Rights Exercise Modalities and Procedures IP Address Controllers Processing Agreement Data Controller
Feb 22, 2024 Source

How it connects

Related across sources

Case Law Google LLC v CNIL CJEU Case Law Google Spain SL and Google Inc. v AEPD and Mario Costeja González CJEU Case Law CJEU Bavarian Lager: Disclosing personal data in access-to-documents requests is CJEU Case Law HvJ EU 9 januari 2025, C‑394/23 (Mousse). CJEU Guidance Guidelines 07/2022 on certification as a tool for transfers EDPB Guidance Guidelines 04/2021 on Codes of Conduct as tools for transfers EDPB

Full text

The Italian DPA has imposed a fine of EUR 50,000 on the transport company azienda Trasporto Passeggeri Emilia-Romagna S.p.A.. The controller provided insufficient information on data processing on a form used to conclude a public transport subscription. The form did not allow a distinction between mandatory and optional data (such as cell phone number and email address) and did not clearly inform users of their right to object to processing for direct marketing purposes.

Industry: Transportation and Energy

Original document at the source www.gpdp.it

Similar Content