Sanction RGPD Italian Data Protection Authority (Garante) — Energia Verde S.p.A. : 100 k€ (2025)
- Autorité de contrôle
- Italian Data Protection Authority (Garante)
- Pays
- Italie
- Entreprise / secteur
- Energia Verde S.p.A.
- Montant de l'amende
- 100 k€
- Date de la décision
- 29 avril 2025
- Fondement juridique
- Art. 5, Art. 6, Art. 7, Art. 12, Art. 15, Art. 16, Art. 17, Art. 18, Art. 19, Art. 20, Art. 21, Art. 22, Art. 24, Art. 28, Art. 31, Art. 58
- Manquement
- Non-respect des principes de traitement
Résumé des faits
The Italian DPA has imposed a fine of EUR 100,000 on Energia Verde S.p.A. The controller had been active in direct marketing activities. The controller processed data without a sufficient legal basis, without sufficient technical and organisational measures to ensure data security and without prior and correct identification of the roles of processors and subjects. The controller fruther failed to adequately react to requests from data subjects to exercise their rights, to demonstrate, that the controller processes data in accordance with the GDPR and adequatly cooperating with the DPA.