DPA case 10072622 – Violation Found (Italy, 2024)

Violation Found
Garante per la protezione dei dati personali26 September 2024Italy
final
Violation Found

General GDPR enforcement action

This case relates to broader data protection obligations, not specifically to cookie or consent banner compliance. It is not included in cookie statistics or the Risk Calculator.

Italy's data protection authority found that a telecommunications company made unsolicited promotional calls without consent. This is important because it reinforces the need for companies to respect users' preferences regarding marketing communications.

What happened

A telecommunications company made unsolicited promotional calls to a user who had opted out of such communications.

Who was affected

A user registered in the Public Opt-Out Register who received the promotional call.

What the authority found

The authority confirmed that the company violated privacy rules by not obtaining consent for the promotional call.

Why this matters

This case highlights the importance of adhering to opt-out requests in marketing. Companies should ensure they respect user preferences to avoid penalties and maintain a good reputation.

GDPR Articles Cited
Automatically processed
Art. 7(GDPR)
Art. 12(GDPR)
Art. 13(GDPR)
Art. 14(GDPR)
Art. 15(GDPR)
Art. 21(GDPR)
Art. 5(1)(a) GDPR
Art. 6(1) GDPR
Art. 58(2)(b) GDPR
View original scraped data
Art. 5(GDPR)
Art. 6(GDPR)
Art. 7(GDPR)
Art. 12(GDPR)
Art. 13(GDPR)
Art. 14(GDPR)
Art. 15(GDPR)
Art. 21(GDPR)
Art. 58(GDPR)

Original imported citations before automated processing; the processing history does not establish independent verification.

National Law Articles
AI-identified
Art. 130 Italian Data Protection Code
Art. 157 Italian Data Protection Code

Source checks

Secondary-source text retrieved.

Automated check recorded — 18 October 2026.

Processing notes: articles corrected, national law identified.

Retrieved text may be a secondary summary or an announcement. These automated statuses do not establish that the original decision was read or that the record received an independent legal review. How we check sources

Full Legal Summary
Detailed

On February 10, 2023, the data subject received an unsolicited promotional call in which the caller identified himself as an employee of a sales organization operating in the telecommunications sector. He offered services for setting up contracts on behalf of various national providers and requested to schedule an appointment with the data subject and a local agent. The data subject, who was registered in the Registro Pubblico delle Opposizioni (Public Opt-Out Register) to block telemarketing calls, had not provided consent for promotional communications. Also, the data subject independently investigated the organization behind the call and sent two emails to the local agent mentioned in the call to request information about how his data was obtained. The local agent replied denying possession of the data subject's personal data or the use of any marketing tools. On August 18, 2023, the data subject submitted a formal complaint to the Italian DPA. He highlighted the unsolicited promotional call, lack of consent for the data processing and his registration in the Public Opt-Out Register. On November 30, 2023, the DPA initiated an inquiry and sent an information request to the local agent, under [https://www.normattiva.it/uri-res/N2Ls?urn:nir:stato:decreto.legislativo:2003-06-30;196!vig=2016-11-14~art157 Article 157 Italian Data Protection Code] (Decreto Legislative 196/2003). The local agent responded, claiming the call was commissioned to a Tunisian market research company called Ste Nabi Call and that he had no direct involvement in contacting the data subject and did not possess his personal data. The DPA sent a second request for clarification, asking the agent to provide details about the service agreement with Ste Nabi Call and clarify the ownership and use of the phone number which called the data subject. In his response, the agent provided information about the agreement with Ste Nabi Call, stating it was for market research. Also, he denied knowledge of the

Outcome

Violation Found

The DPA found a violation but did not impose a fine.

Related Enforcement Actions (0)

No other enforcement actions found for DPA case 10072622 in IT

This is the only recorded action for this entity in this jurisdiction.

Details

Decision Date

26 September 2024

Authority

Garante per la protezione dei dati personali

GDPRhub ID

gdprhub-8593

About this data

Data: GDPRhub (noyb.eu)
Licensed under CC BY-NC-SA 4.0
Automatically normalized and classified

Cite as: Cookie Fines. DPA case 10072622 - Italy (2024). Retrieved from cookiefines.eu

Report Inaccuracy

Last updated: