Garante per la protezione dei dati personali (Italy) · 17 October 2024
Serfin 97 S.r.l.
About: Data subject rights, Processor obligations
Fine€60,000Violation found
- Regulator
- Garante per la protezione dei dati personali (Italy)
- Decided
- 17 October 2024
- Country
- Italy
- Sector
- Not given
- Regulator’s reference
- 10084403
- Fino case number
- 2024/IT/132
What happened
The DPA fined a processor €60,000 after they emailed a data subject´s acquaintance regarding an outstanding debt. In violation of Article 28 GDPR and of the controller’s instructions, it could not explain the source of this data.
Summary from GDPRhub (noyb), written by its volunteers, not by Fino. CC BY-NC-SA 4.0.
Rules involved
- Art. 15Right of access by the data subject15(1)(g)Read →
- Art. 28Processor28(3)(a) · 28(3)(e) · 28(3)(h)Read →
- Data subject rights
- Processor obligations
Sources
The facts on this page come from the sources above, as they recorded them. Nothing has been estimated or filled in. Not legal advice.
Spotted a mistake? Write to angelillolorenzo@gmail.com and quote 2024/IT/132.