Rinascente – €300,000 Fine (Italy, 2023)

€300,000Garante per la protezione dei dati personali8 June 2023Italy
final
ePrivacy
Fine

Rinascente was fined for not clearly informing users about data sharing with Facebook-Meta and for tracking visitors without their consent. This matters because it highlights the importance of transparency and consent in online advertising. Companies must ensure they communicate clearly about how they use cookies and obtain user permission before tracking.

What happened

Rinascente failed to provide clear information about data transfers to Facebook-Meta for advertising and profiling, and did not obtain prior consent for third-party tracking.

Who was affected

Website visitors whose data was shared with Facebook-Meta through Rinascente's tracking tools.

What the authority found

The Garante ruled that Rinascente violated GDPR by not being transparent about data transfers and lacking valid consent for tracking.

Why this matters

This case emphasizes the need for online businesses to be clear about their data practices and obtain user consent. It sets a precedent for stricter enforcement of consent requirements in digital advertising.

GDPR Articles Cited

AI-verified

Art. 5(GDPR)
Art. 12(GDPR)
Art. 32(GDPR)
View original scraped data
Art. 5(GDPR)
Art. 12(GDPR)
Art. 32(GDPR)

Original data from scraper before AI verification against source document.

Source verified 2 April 2026
national law identified
Full Legal Summary
Detailed

The company failed to provide clear information about data transfers to Facebook-Meta for advertising and profiling, and did not obtain prior consent for third-party tracking.

Violations (2)

Third-Party Cookies Without Consent
critical

Third-party tracking cookies or scripts are loaded without obtaining prior user consent.

Art. 13, 14 GDPR

Unclear Cookie Information
high

The cookie banner or cookie policy provides vague, incomplete, or unclear information about what cookies are used and why.

Art. 12, 13 GDPR

Related Enforcement Actions (0)

No other enforcement actions found for Rinascente in IT

This is the only recorded action for this entity in this jurisdiction.

Details

Fine Date

8 June 2023

Authority

Garante per la protezione dei dati personali

Fine Amount

€300,000

GDPRhub ID

gdprhub-6157

About this data

Data: GDPRhub (noyb.eu)
Licensed under CC BY-NC-SA 4.0
AI-verified and classified
Cookie relevance: 80%

Cite as: Cookie Fines. Rinascente - Italy (2023). Retrieved from cookiefines.eu

Report Inaccuracy

Last updated: