Enforcement · Italian Data Protection Authority (Garante) EN LLM context A cited markdown file you can paste into your AI assistant (ChatGPT, Claude, a RAG or project knowledge base) to ground it in this document. Contains: this document’s text, its sections with their topics, and the full text of every law provision it applies. Everything links back to its source on overview.legal — legal information, not advice.

Rossi Carta S.r.l.: Insufficient fulfilment of data subjects rights

€30,000 Fine
Rossi Carta S.r.l.
ITALY
Art. 6 GDPR Art. 7 GDPR Art. 12 GDPR Art. 15 GDPR
Data Subject Rights Exercise Modalities and Procedures Controllers Personal Data Direct Marketing Processing Agreement Data Controller Supervisory Authorities Law Enforcement
Apr 24, 2024 Source

How it connects

Related across sources

Guidance Guidelines 4/2019 on Article 25 Data Protection by Design and by Default Version 2.0 Adopted on 20 October 2020 EDPB Case Law Google LLC v CNIL CJEU Case Law GOOGLE SPAIN SL V. AEPD (THE DPA) & MARIO COSTEJA GONZALEZ, 13.May.2014 (“GOOGLE v. Spain”) CJEU Case Law Google Spain SL and Google Inc. v AEPD and Mario Costeja González CJEU Case Law CJEU Bavarian Lager: Disclosing personal data in access-to-documents requests is CJEU Case Law HvJ EU 9 januari 2025, C‑394/23 (Mousse). CJEU

Full text

The Italian DPA has imposed a fine of EUR 30,000 on Rossi Carta S.r.l.. An individual had filed a complaint with the DPA after repeatedly receiving unsolicited advertising emails from the controller. Additionally, the controller failed to properly process the individual's request to exercise their data subject rights.

Industry: Industry and Commerce

Original document at the source www.gpdp.it

Similar Content