Sanction RGPD Italian Data Protection Authority (Garante) — Eni Plenitude S.p.A. : 6,4 M€ (2024)
- Autorité de contrôle
- Italian Data Protection Authority (Garante)
- Pays
- Italie
- Entreprise / secteur
- Eni Plenitude S.p.A.
- Montant de l'amende
- 6,4 M€
- Date de la décision
- 6 juin 2024
- Fondement juridique
- Art. 5 (1) a), d), f), Art. 5 (2), Art. 6, Art. 24, Art. 25, Art. 28, Art. 130 Codice della privacy
- Manquement
- Non-respect des principes de traitement
Résumé des faits
The Italian DPA has imposed a fine of EUR 6.419.631 on Eni Plenitude S.p.A.. The DPA initiated an investigation against the controller due to 107 notifications and 8 complaints from data subjects regarding undesired marketing calls. It found that the controller had repeatedly called data subjects without their consent or registration in the national opt-out register. The DPA also found that a large number of the contracts concluded resulted from the illegal calls. The high number of unauthorized advertising calls was mainly due to the controller's lack of control over its contracted advertising agencies.