Wind Tre SpA – €16,729,600 Fine (Italy, 2020)

€16,729,600Garante per la protezione dei dati personali9 July 2020Italy
final
ePrivacy
Fine

Italy's data protection authority fined Wind Tre SpA over 16 million euros for sending unwanted marketing messages without consent and making it hard for users to withdraw consent. This matters because it shows companies must respect user choices and provide clear ways to opt out of marketing. The ruling highlights the importance of transparency and user control in data practices.

What happened

Wind Tre SpA sent unsolicited marketing messages and made it difficult for users to withdraw consent.

Who was affected

Customers and non-customers of Wind Tre who received unwanted marketing communications.

What the authority found

The Italian authority found Wind Tre violated GDPR by not allowing users to easily withdraw consent and by sending marketing messages without consent.

Why this matters

This case emphasizes the need for businesses to ensure clear consent mechanisms and easy opt-out options for users. It serves as a warning that failing to comply with GDPR can result in substantial fines.

GDPR Articles Cited

AI-verified

Art. 7 GDPR
Art. 24 GDPR
Art. 25 GDPR
Art. 5(1) GDPR
Art. 5(2) GDPR
Art. 6(1)(a) GDPR
Art. 12(1) GDPR
Art. 12(2) GDPR
Art. 58(2)(d) GDPR
Art. 58(2)(f) GDPR
Art. 58(2)(i) GDPR
Art. 83(2) GDPR
Art. 83(4)(a) GDPR
Art. 83(5) GDPR
Art. 83(5)(a) GDPR
View original scraped data
Art. 5(1) GDPR
Art. 5(2) GDPR
Art. 6(1)(a) GDPR
Art. 7 GDPR
Art. 12(1) GDPR
Art. 12(2) GDPR
Art. 24 GDPR
Art. 25 GDPR
Art. 58(2)(f) GDPR
Art. 58(2)(d) GDPR
Art. 58(2)(i) GDPR
Art. 83(2) GDPR
Art. 83(4)(a) GDPR
Art. 83(5) GDPR
Art. 83(5)(a) GDPR

Original data from scraper before AI verification against source document.

National Law Articles

AI-identified

Article 130 Codice Privacy
Source verified 4 March 2026
articles corrected
national law identified
Italy enforcementGarante per la protezione dei dati personali actionsAll Wind Tre SpA actions
Full Legal Summary
Detailed

Wind Tre's apps required consent for various purposes on each access, with withdrawal only allowed after 24 hours, and users faced difficulties withdrawing consent for marketing communications.

Violations (2)

Misleading Banner Messaging
critical

The cookie banner uses misleading language to trick or pressure users into accepting cookies (dark patterns).

Art. 7 GDPR

Cannot Withdraw Cookie Consent
critical

No accessible mechanism exists for users to withdraw previously given cookie consent.

Art. 7(3) GDPR

Related Enforcement Actions (0)

No other enforcement actions found for Wind Tre SpA in IT

This is the only recorded action for this entity in this jurisdiction.

Similar Cases

Enforcement actions with similar violations

Website operator

2023 · Agencia Española de Protección de Datos

€1K

Pagamastarde S.L.

2021 · Agencia Española de Protección de Datos

€3K

BANKIA, S.A.

2021 · Agencia Española de Protección de Datos

€50K

GOOGLE LLC

2025 · Commission Nationale de l'Informatique et des Libertés

€200.0M

Yahoo EMEA Limited

2023 · Commission Nationale de l'Informatique et des Libertés

€10.0M

Details

Fine Date

9 July 2020

Authority

Garante per la protezione dei dati personali

Fine Amount

€16,729,600

GDPRhub ID

gdprhub-2558

Sources

About this data

Data: GDPRhub (noyb.eu)
Licensed under CC BY-NC-SA 4.0
AI-verified and classified
Cookie relevance: 80%

Cite as: Cookie Fines. Wind Tre SpA - Italy (2020). Retrieved from cookiefines.eu

Report Inaccuracy

Last updated: