Sanction RGPD Italian Data Protection Authority (Garante) — Tiscali Italia SpA : 100 k€ (2023)
- Autorité de contrôle
- Italian Data Protection Authority (Garante)
- Pays
- Italie
- Entreprise / secteur
- Tiscali Italia SpA
- Montant de l'amende
- 100 k€
- Date de la décision
- 18 juillet 2023
- Fondement juridique
- Art. 5 (1) a), b), c), e), Art. 5 (2), Art. 12 (1), Art. 13 (1) a), Art. 24, Art. 130 Codice della privacy
- Manquement
- Non-respect des principes de traitement
Résumé des faits
The Italian DPA has imposed a fine of EUR 100,000 on Tiscali Italia SpA. The controller had sent advertising messages to more than 160,000 customers within four months, even though they had not given their consent and there was also no other valid legal basis. The DPA also found that the controller had not sufficiently fulfilled its information obligations. For example, there was a lack of information on the retention period for personal data processed for marketing purposes.