Italian Data Protection Authority (Garante) · 22 February 2024
Azienda Trasporto Passeggeri Emilia-Romagna S.p.A.
Non-compliance with general data processing principles
Fine€50,000Fine issued
- Regulator
- Italian Data Protection Authority (Garante)
- Decided
- 22 February 2024
- Country
- Italy
- Sector
- Transportation and Energy
- Regulator’s reference
- Not recorded
- Fino case number
- 2024/IT/049
What happened
The DPA fined a public transport service company €50,000 and ordered the controller to bring the processing operations into conformity with principle of storage limitation by setting data retention period to 24 months for marketing purposes and 12 months for data relating to profiling.
Summary from the GDPRhub page for this decision, written by its volunteers, not by Fino. CC BY-NC-SA 4.0.
Rules involved
- Art. 5Principles relating to processing of personal data5(2)Read →
- Art. 6Lawfulness of processing6(1)(a)Read →
- Art. 7Conditions for consentRead →
- Art. 12Transparent information, communication and modalities for the exercise of the rights of the data subject12(1)Read →
- Art. 13Information to be provided where personal data are collected from the data subjectRead →
- Art. 21Right to object21(4)Read →
- Consent
- Data principles
- Data subject rights
- Transparency
- Unlawful processing
Sources
The facts on this page come from the sources above, as they recorded them. Nothing has been estimated or filled in. Not legal advice.
Spotted a mistake? Write to angelillolorenzo@gmail.com and quote 2024/IT/049.