# Rossi Carta S.r.l.: Insufficient fulfilment of data subjects rights

- Type: Enforcement
- Source: Italian Data Protection Authority (Garante)
- Date: 2024-04-24
- Original: https://www.enforcementtracker.com/ETid-2409
- Canonical: https://overview.legal/posts/48524
- Topics: Data Subject Rights Exercise Modalities and Procedures, Controllers, Personal Data, Direct Marketing, Processing Agreement, Data Controller, Supervisory Authorities, Law Enforcement

## Summary

The Italian DPA has imposed a fine of EUR 30,000 on Rossi Carta S.r.l.. An individual had filed a complaint with the DPA after repeatedly receiving unsolicited advertising emails from the controller. Additionally, the controller failed to properly process the individual's request to exercise their data subject rights.

## Full text

The Italian DPA has imposed a fine of EUR 30,000 on Rossi Carta S.r.l.. An individual had filed a complaint with the DPA after repeatedly receiving unsolicited advertising emails from the controller. Additionally, the controller failed to properly process the individual's request to exercise their data subject rights.

GDPR Articles: Art. 6 GDPR, Art. 7 GDPR, Art. 12 (3) GDPR, Art. 15 GDPR
Industry: Industry and Commerce

---
Generated by overview.legal · https://overview.legal/posts/48524 · 2026-08-22