Garante per la protezione dei dati personali (Italy) · 27 February 2025
Energia Pulita S.r.l.
About: Accountability, Consent, Data principles, Data security, Processor obligations, Special categories, Transparency, Unlawful processing
- Regulator
- Garante per la protezione dei dati personali (Italy)
- Decided
- 27 February 2025
- Country
- Italy
- Sector
- Not given
- Regulator’s reference
- 10114967
- Fino case number
- 2025/IT/089
What happened
The Italian data protection authority fined an energy company €300,000 for unlawfully processing personal data for direct marketing, for failing to properly implement data protection principles on an organizational level, and for insufficiently informing job applicants about the processing of their data.
Summary from GDPRhub (noyb), written by its volunteers, not by Fino. CC BY-NC-SA 4.0.
Rules involved
- Art. 5Principles relating to processing of personal dataRead →
- Art. 6Lawfulness of processingRead →
- Art. 7Conditions for consentRead →
- Art. 9Processing of special categories of personal dataRead →
- Art. 12Transparent information, communication and modalities for the exercise of the rights of the data subjectRead →
- Art. 13Information to be provided where personal data are collected from the data subjectRead →
- Art. 24Responsibility of the controllerRead →
- Art. 25Data protection by design and by defaultRead →
- Art. 28ProcessorRead →
- Art. 29Processing under the authority of the controller or processorRead →
- Art. 32Security of processingRead →
- Accountability
- Consent
- Data principles
- Data security
- Processor obligations
- Special categories
- Transparency
- Unlawful processing
Sources
The facts on this page come from the sources above, as they recorded them. Nothing has been estimated or filled in. Not legal advice.
Spotted a mistake? Write to angelillolorenzo@gmail.com and quote 2025/IT/089.