Unleadmited S.r.l. – €5,000 Fine (Italy, 2026)

€5,000Garante per la protezione dei dati personali12 February 2026Italy
final
Fine

General GDPR enforcement action

This case relates to broader data protection obligations, not specifically to cookie or consent banner compliance. It is not included in cookie statistics or the Risk Calculator.

Unleadmited S.r.l. was fined €5,000 for collecting personal data through a misleading website without proper consent. This is important because it shows that businesses must be clear and honest when asking for personal information. Small business owners should ensure their consent processes are transparent and reliable.

What happened

The company collected personal data through a comparison portal without a valid legal basis for consent.

Who was affected

Users who provided their personal information through the company's website for marketing purposes.

What the authority found

The Italian DPA ruled that Unleadmited S.r.l. did not have a sufficient legal basis for processing personal data, violating GDPR requirements.

Why this matters

This ruling serves as a reminder for businesses to implement clear consent mechanisms and to be transparent about how they use personal data. Companies should audit their data collection practices to ensure compliance.

GDPR Articles Cited

AI-verified

Art. 7(GDPR)
Art. 24(GDPR)
Art. 5(1)(a) GDPR
Art. 6(1) GDPR
View original scraped data
Art. 5(GDPR)
Art. 6(GDPR)
Art. 7(GDPR)
Art. 24(GDPR)

Original data from scraper before AI verification against source document.

National Law Articles

AI-identified

Art. 122 Codice Privacy
Source verified 23 April 2026
articles corrected
national law identified
Full Legal Summary
Detailed

The Italian DPA has imposed a fine of EUR 5,000 on Unleadmited S.r.l. The controller operated a lead-generation business for direct marketing purposes and collected personal data through a website that was presented as a comparison portal. This data was then disclosed to third parties for their marketing activities. This processing lacked a sufficient legal basis, as the consent mechanism and privacy information were not specific, transparent or reliable enough. Furthermore, the controller failed to implement adequate technical and organisational measures to verify the identity of data subjects and demonstrate valid consent. Furthermore, the controller failed to respond properly and in a timely manner to the DPA’s requests.

Related Enforcement Actions (0)

No other enforcement actions found for Unleadmited S.r.l. in IT

This is the only recorded action for this entity in this jurisdiction.

Details

Fine Date

12 February 2026

Authority

Garante per la protezione dei dati personali

Fine Amount

€5,000

Enforcement Tracker ID

ETid-3084

About this data

Data: CMS GDPR Enforcement Tracker
Licensed under CC BY-NC-SA 4.0
AI-verified and classified

Cite as: Cookie Fines. Unleadmited S.r.l. - Italy (2026). Retrieved from cookiefines.eu

Report Inaccuracy

Last updated: