Italian Data Protection Authority (Garante) · 20 October 2022
Douglas Italia S.p.a.
Non-compliance with general data processing principles
Fine€1,400,000Fine issued
- Regulator
- Italian Data Protection Authority (Garante)
- Decided
- 20 October 2022
- Country
- Italy
- Sector
- Industry and Commerce
- Regulator’s reference
- Not recorded
- Fino case number
- 2022/IT/009
What happened
The Italian DPA fined Douglas for a total of €1,400,000 for several GDPR violations, including unlawful data processing, lack of transparency, and long periods of data retention.
Summary from the GDPRhub page for this decision, written by its volunteers, not by Fino. CC BY-NC-SA 4.0.
Rules involved
- Art. 5Principles relating to processing of personal data5(2)Read →
- Art. 6Lawfulness of processingRead →
- Art. 7Conditions for consentRead →
- Art. 12Transparent information, communication and modalities for the exercise of the rights of the data subject12(1)Read →
- Art. 13Information to be provided where personal data are collected from the data subject13(2)(a)Read →
- Art. 24Responsibility of the controllerRead →
- Art. 25Data protection by design and by default25(1)Read →
- Accountability
- Consent
- Data principles
- Transparency
- Unlawful processing
Sources
The facts on this page come from the sources above, as they recorded them. Nothing has been estimated or filled in. Not legal advice.
Spotted a mistake? Write to angelillolorenzo@gmail.com and quote 2022/IT/009.