Italian Data Protection Authority (Garante) · 16 September 2021
Sky Italia S.r.l.
Insufficient legal basis for data processing
- Regulator
- Italian Data Protection Authority (Garante)
- Decided
- 16 September 2021
- Country
- Italy
- Sector
- Media, Telecoms and Broadcasting
- Regulator’s reference
- Not recorded
- Fino case number
- 2021/IT/028
What happened
The Italian DPA fined Sky Italia €3,000,000 for making unsolicited direct marketing calls, both independently and through call centres. It obtained the data necessary to make these through third party companies, thus unlawfully circumventing the requirement for data subjects to have consented to their personal data being used for promotional purposes.
Summary from the GDPRhub page for this decision, written by its volunteers, not by Fino. CC BY-NC-SA 4.0.
Rules involved
- Art. 6Lawfulness of processing6(1)Read →
- Art. 7Conditions for consentRead →
- Art. 12Transparent information, communication and modalities for the exercise of the rights of the data subject12(2)Read →
- Art. 14Information to be provided where personal data have not been obtained from the data subjectRead →
- Art. 21Right to objectRead →
- Art. 28ProcessorRead →
- Art. 29Processing under the authority of the controller or processorRead →
- Consent
- Data subject rights
- Processor obligations
- Transparency
- Unlawful processing
Sources
The facts on this page come from the sources above, as they recorded them. Nothing has been estimated or filled in. Not legal advice.
Spotted a mistake? Write to angelillolorenzo@gmail.com and quote 2021/IT/028.