Vimar S.p.A.: Insufficient legal basis for data processing

The Italian DPA has imposed a fine of EUR 15,000 on Vimar S.p.A. The controller created an internal and personalised email account with the personal data of a third party, without their knowledge. Multiple people within the controller's company used this account for three years.

GDPR Articles: Art. 5 (1) a), b), c), d) GDPR, Art. 6 GDPR, Art. 13 GDPR
Industry: Industry and Commerce