Italian Data Protection Authority (Garante) · 8 June 2023
Rinascente S.p.A.
Non-compliance with general data processing principles
Fine€300,000Fine issued
- Regulator
- Italian Data Protection Authority (Garante)
- Decided
- 8 June 2023
- Country
- Italy
- Sector
- Industry and Commerce
- Regulator’s reference
- Not recorded
- Fino case number
- 2023/IT/046
What happened
The Italian DPA fined La Rinascente €300,000 for failing to ensure a secure processing of personal data, for not having carried out a DPIA before profiling its customers and for not adequately informing the data retention period.
Summary from the GDPRhub page for this decision, written by its volunteers, not by Fino. CC BY-NC-SA 4.0.
Rules involved
- Art. 12Transparent information, communication and modalities for the exercise of the rights of the data subject12(1)Read →
- Art. 35Data protection impact assessmentRead →
- DPIA
- Data principles
- Transparency
Sources
The facts on this page come from the sources above, as they recorded them. Nothing has been estimated or filled in. Not legal advice.
Spotted a mistake? Write to angelillolorenzo@gmail.com and quote 2023/IT/046.