GDPR Fines

A public record of GDPR enforcement across Europe — compiled by INPLP members

Wind Tre S.p.A.

Country
Italy
Fine
16,729,600 EUR
Date
2020-07-09
Sector
Telecommunications
Articles
Art.5, par.1 and 2art.6, par. 1, lett. a)art.7art. 12, par. 1 and 2art.24, par. 1art. 25. par.1 of GDPR.

Failure to comply with the lawfulness, fairness and transparency, absence of consent for data processing, failure to take appropriate measures to provide information, failure to comply with the principle of accountability and privacy.

In July 2020, the Italian DPA issued a decision regarding numerous unlawful data processing operations, mainly related to promotional activities, carried out by Wind. In particular, the providers of the Company did not check whether the call centres, with which they collaborated, had properly collected consent for the processing of customers' personal data; at the same time, the Company did not monitor these activities carried out in its interest by the providers. Moreover, in some cases, customers' data were found to be present in telephone directories despite the request for deletion. These violations led to promotional contacts being received by consumers without their consent. In many cases, the consumers were not even able to exercise their right to withdraw their consent or to object to the processing of their data for marketing purposes.