Sanction RGPD Italian Data Protection Authority (Garante) — Gaypa s.r.l. : 20 k€ (2020)
- Autorité de contrôle
- Italian Data Protection Authority (Garante)
- Pays
- Italie
- Entreprise / secteur
- Gaypa s.r.l.
- Montant de l'amende
- 20 k€
- Date de la décision
- 29 octobre 2020
- Fondement juridique
- Art. 5 (1) a), c), e), Art. 12, Art. 13
- Manquement
- Non-respect des principes de traitement
Résumé des faits
The Italian DPA (Garante) imposed a fine of EUR 20,000 on Gaypa s.r.l.. The controller had kept a former employee's email account active and had access to the data subject's correspondence, despite the termination of his/her employment. The data subject had not been informed about such a further use of his/her e-mail account, as well as about the storage of all incoming and outgoing e-mails on the company servers and the related processing of his/her personal data.