Sanction RGPD Italian Data Protection Authority (Garante) — Mas s.r.l.s. : 200 k€ (2023)
- Autorité de contrôle
- Italian Data Protection Authority (Garante)
- Pays
- Italie
- Entreprise / secteur
- Mas s.r.l.s.
- Montant de l'amende
- 200 k€
- Date de la décision
- 13 avril 2023
- Fondement juridique
- Art. 5 (1) a), Art. 5 (2), Art. 6, Art. 7, Art. 13, Art. 28, Art. 29, Art. 30
- Manquement
- Non-respect des principes de traitement
Résumé des faits
The Italian DPA has imposed a fine of EUR 200,000 on Mas s.r.l.s.. During its investigation, the DPA found that the controller had acquired illegally created lists containing personal data and used them for marketing purposes without the consent of the data subjects in order to provide them with commercial offers from various energy companies.