Foodinho S.r.l.
- Country
- Italy
- Fine
- 2,600,000 EUR
- Date
- 2021-07-10
- Sector
- Food delivery
- Articles
- Art.5, par.1 lett. a), c) and e)art. 13art. 22, par. 3art. 30, par. 1, lett. a), b), c), f) and g)art.35art.37, par. 7 of GDPR
Failure to comply with general data processing principles, with the obligation to provide sufficient information to the data subject and to implement suitable measures for automated processing.
The Italian DPA found several violations commited by the Society, in particular in relation to the algorithms used to manage its riders. For example, the Society had not adequately informed workers about the operation of the system and did not ensure guarantees about the accuracy and fairness of the results of the algorithmic systems used to evaluate the riders. It also failed to ensure procedures to protect the right to obtain human intervention, express one's opinion and challenge decisions taken through the use of the algorithms in question, including the exclusion of some riders from work opportunities. Besides that, the Society did not even communicate the contact details of the DPO to the Italian DPA and did not provide a data protection impact assessment for the data processing activities in relation to its riders.