Sofisticated Luxury Flats S.r.l. – €2,000 Fine (Italy, 2022)
General GDPR enforcement action
This case relates to broader data protection obligations, not specifically to cookie or consent banner compliance. It is not included in cookie statistics or the Risk Calculator.
Sofisticated Luxury Flats S.r.l. was fined for not responding to requests from the Italian Data Protection Authority regarding the use of a biometric attendance system. The company failed to provide necessary information about its data practices, leading to a fine of €2,000. This case highlights the importance of cooperating with data protection authorities and maintaining transparency in data handling.
What happened
Sofisticated Luxury Flats S.r.l. did not respond to inquiries about its biometric attendance system.
Who was affected
An employee from the Royal Palace Hotel in Rome, who was affected by the biometric system.
What the authority found
The Italian Data Protection Authority fined the company for failing to respond to multiple requests for information about its data practices.
Why this matters
This case underscores the necessity for businesses to engage with data protection authorities and comply with requests, as non-compliance can lead to financial penalties.
Entities Involved
Source checks
Secondary-source text retrieved.
Automated check recorded — 18 October 2026.
Processing notes: articles corrected, national law identified.
Retrieved text may be a secondary summary or an announcement. These automated statuses do not establish that the original decision was read or that the record received an independent legal review. How we check sources
The Royal Palace Hotel is owned by Luxury Flats s.r.l. (the controller). An employee (the data subject) from the Royal Palace Hotel in Rome filed a complaint against the controller for the use of a biometric device aimed at recording the employees’ attendance at work. This tool had the ability to register the start and end of the employees’ workday by scanning their fingerprints. Following the complaint, the DPA opened an investigation into the case. On 10 August 2020, the DPA gave the controller the opportunity to provide feedback, followed by two other inquiries on 5 January 2020 and 29 April 2021. The controller did not respond to any of them. Therefore, the DPA delegated the case to the Special Unit for the Protection of Privacy and Technological Fraud of the Italian finance police to acquire the requested information and to notify the controller of the initiation of sanctioning proceedings pursuant to Article 166(5) of the Personal Data Protection Code (Codice in materia di protezione dei dati personali). During the visit from the Special Unit, the controller declared that it "did not understand the meaning of the DPA's emails regarding the investigation" and "was not aware that it had to respond to these inquiries." The controller stated that the device had not been used since January or February 2020 since it did not work properly. It could not recall where the device was, nor could it provide documentation on the model of the device. Based on the facts and the statements of the controller, the DPA found no objective element's that would allow for a sanction. However, due to its failure to respond to the multiple requests of the DPA, the controller breached Article 157 (request for information and production of documents) in relation to Article 166(2) of the Code. Therefore, the DPA held that a fine was necessary. The DPA held that, with reference to Recital 148 GDPR, the infringement could not be regarded as 'minor'. Having regard to the nature, seriou
Related Enforcement Actions (0)
No other enforcement actions found for Sofisticated Luxury Flats S.r.l. in IT
This is the only recorded action for this entity in this jurisdiction.
Details
Fine Date
15 September 2022
Authority
Garante per la protezione dei dati personali
Fine Amount
€2,000
GDPRhub ID
gdprhub-5364About this data
Cite as: Cookie Fines. Sofisticated Luxury Flats S.r.l. - Italy (2022). Retrieved from cookiefines.eu
Last updated: