# Mas s.r.l.s.: Non-compliance with general data processing principles

- Type: Enforcement
- Source: Italian Data Protection Authority (Garante)
- Date: 2023-04-13
- Original: https://www.enforcementtracker.com/ETid-2308
- Canonical: https://overview.legal/posts/48423
- Topics: IP Address, Controllers, Direct Marketing, Personal Data, Processing Agreement, Marketing, Processing, Consent, Data Controller, Supervisory Authorities

## Summary

The Italian DPA has imposed a fine of EUR 200,000 on Mas s.r.l.s.. During its investigation, the DPA found that the controller had acquired illegally created lists containing personal data and used them for marketing purposes without the consent of the data subjects in order to provide them with commercial offers from various energy companies.

## Full text

The Italian DPA has imposed a fine of EUR 200,000 on Mas s.r.l.s.. During its investigation, the DPA found that the controller had acquired illegally created lists containing personal data and used them for marketing purposes without the consent of the data subjects in order to provide them with commercial offers from various energy companies.

GDPR Articles: Art. 5 (1) a) GDPR, Art. 5 (2) GDPR, Art. 6 GDPR, Art. 7 GDPR, Art. 13 GDPR, Art. 28 GDPR, Art. 29 GDPR, Art. 30 GDPR
Industry: Industry and Commerce

---
Generated by overview.legal · https://overview.legal/posts/48423 · 2026-08-22