Squeezemind S.r.l. – Violation Found (Italy, 2025)

Violation Found
Garante per la protezione dei dati personali9 October 2025Italy
final
ePrivacy
Violation Found

Squeezemind S.r.l. faced scrutiny for misleading cookie consent practices on its website. This is important because it shows that companies must be clear and honest about how they use cookies.

What happened

Squeezemind S.r.l. displayed a cookie banner that misled users about the use of advertising cookies.

Who was affected

Website visitors who interacted with Squeezemind S.r.l.'s cookie banner were affected.

What the authority found

The Italian data protection authority found that Squeezemind S.r.l. did not provide clear cookie information and misrepresented cookie usage, violating GDPR.

Why this matters

This ruling emphasizes that companies must ensure their cookie banners accurately reflect their practices. Website operators should regularly audit their cookie consent mechanisms to comply with regulations.

GDPR Articles Cited

AI-verified

Art. 12(GDPR)
Art. 13(GDPR)
Art. 5(1)(a) GDPR
Art. 5(1)(c) GDPR
View original scraped data
Art. 5(1)(a) GDPR
Art. 5(1)(c) GDPR
Art. 12(GDPR)
Art. 13(GDPR)

Original data from scraper before AI verification against source document.

National Law Articles

AI-identified

Art. 122 Codice Privacy
Source verified 11 April 2026
articles corrected
national law identified
Full Legal Summary
Detailed

Cookiemetrix is an online service that analyses the cookies on websites and suggests whether or not they require the consent of the end users. Cookiemetrix is marketed as a tool to aid companies comply with EU data protection law and is available under both a free and a paid subscription. In October 2024 the DPA carried out an ex-officio investigation against Squeezemind s.r.l. - the controller and owner or Cookiemetrix. The DPA investigated both the functioning of Cookiemetrix and the use of cookies on the controller’s website. = The controller’s website displayed a cookie banner which allowed users to accept “advertisement cookies” or to browse the website with only strictly necessary cookies. This preference was stored in a cookie - a common practice for many websites. The investigation found that despite the wording of the cookie banner, the website never used advertising cookies. In this regard, the controller explained that it removed advertising cookies from its website years before the investigation took place, but forgot to change or deactivate the cookie banner. = Cookiemetrix analysed and labelled cookies in several steps. First, Cookiemetrix crawled a web page, listed all the cookies that the page attempt to write, and assessed which of those cookies were conditional on the user's consentTo this end, Cookiemetrix would actually crawl each page twice. In one crawl, Cookiemetrix would simulate consenting to any cookie pop-ups on the page; in the other, it would simulate rejecting consent. By comparing the results, Cookiemetrix learned not only what cookies were written but also which cookies were conditional on the user's consent.. Then, Cookiemetrix matched these cookies against an open-source library of known cookies and labelled each cookie as “essential” (i.e.: requiring consent under the law) or “non-essential” (i.e.: when the cookies fell under one of the exemptions of the ePrivacy Directive) according to the library. Finally, Cookiemetrix provided

Outcome

Violation Found

The DPA found a violation but did not impose a fine.

Violations (3)

Third-Party Cookies Without Consent
critical

Third-party tracking cookies or scripts are loaded without obtaining prior user consent.

Art. 13, 14 GDPR

Unclear Cookie Information
high

The cookie banner or cookie policy provides vague, incomplete, or unclear information about what cookies are used and why.

Art. 12, 13 GDPR

Misleading Banner Messaging
critical

The cookie banner uses misleading language to trick or pressure users into accepting cookies (dark patterns).

Art. 7 GDPR

Related Enforcement Actions (0)

No other enforcement actions found for Squeezemind S.r.l. in IT

This is the only recorded action for this entity in this jurisdiction.

Details

Decision Date

9 October 2025

Authority

Garante per la protezione dei dati personali

GDPRhub ID

gdprhub-9635

About this data

Data: GDPRhub (noyb.eu)
Licensed under CC BY-NC-SA 4.0
AI-verified and classified
Cookie relevance: 80%

Cite as: Cookie Fines. Squeezemind S.r.l. - Italy (2025). Retrieved from cookiefines.eu

Report Inaccuracy

Last updated: