Italian Data Protection Authority (Garante) · 5 August 2022
Colosseo S.r.l.
Insufficient fulfilment of data subjects rights
Fine€1,000Fine issued
- Regulator
- Italian Data Protection Authority (Garante)
- Decided
- 5 August 2022
- Country
- Italy
- Sector
- Industry and Commerce
- Regulator’s reference
- Not recorded
- Fino case number
- 2022/IT/052
What happened
The Italian DPA fined a controller €1,000 for sending promotional messages without the data subject's consent and for ineffectively monitoring the third party carrying out the processing in its interest.
Summary from the GDPRhub page for this decision, written by its volunteers, not by Fino. CC BY-NC-SA 4.0.
Rules involved
- Art. 5Principles relating to processing of personal data5(2)Read →
- Art. 6Lawfulness of processing6(1)(a)Read →
- Art. 12Transparent information, communication and modalities for the exercise of the rights of the data subject12(3)Read →
- Art. 15Right of access by the data subjectRead →
- Art. 17Right to erasure (‘right to be forgotten’)Read →
- Art. 21Right to objectRead →
- Art. 24Responsibility of the controllerRead →
- Accountability
- Data principles
- Data subject rights
- Transparency
- Unlawful processing
Sources
The facts on this page come from the sources above, as they recorded them. Nothing has been estimated or filled in. Not legal advice.
Spotted a mistake? Write to angelillolorenzo@gmail.com and quote 2022/IT/052.