Italian Data Protection Authority (Garante) · 30 November 2023
Limit Call S.r.l.s.
Insufficient legal basis for data processing
- Regulator
- Italian Data Protection Authority (Garante)
- Decided
- 30 November 2023
- Country
- Italy
- Sector
- Media, Telecoms and Broadcasting
- Regulator’s reference
- Not recorded
- Fino case number
- 2023/IT/008
What happened
Following an on-site inspection, the Italian DPA fined Limit Call €60,000. The controller was found to have conducted promotional calls without the informed consent of the data subjects, breaching Article 5(1)(a) GDPR, Article 6(1)(a) GDPR, Article 7 GDPR, and without informing the data subjects of all the essential information required by Article 13 GDPR and Article 14 GDPR.
Summary from the GDPRhub page for this decision, written by its volunteers, not by Fino. CC BY-NC-SA 4.0.
Rules involved
- Art. 5Principles relating to processing of personal data5(2)Read →
- Art. 6Lawfulness of processingRead →
- Art. 7Conditions for consentRead →
- Art. 12Transparent information, communication and modalities for the exercise of the rights of the data subjectRead →
- Art. 13Information to be provided where personal data are collected from the data subjectRead →
- Art. 14Information to be provided where personal data have not been obtained from the data subjectRead →
- Art. 15Right of access by the data subjectRead →
- Art. 24Responsibility of the controllerRead →
- Accountability
- Consent
- Data principles
- Data subject rights
- Transparency
- Unlawful processing
Sources
The facts on this page come from the sources above, as they recorded them. Nothing has been estimated or filled in. Not legal advice.
Spotted a mistake? Write to angelillolorenzo@gmail.com and quote 2023/IT/008.