Benetton Group S.r.l. – €240,000 Fine (Italy, 2023)
Benetton Group S.r.l. was fined EUR 240,000 for failing to protect customer data and not allowing users to manage their cookie preferences. This is important because it shows that companies must take data protection seriously and provide clear options for users. It sets a standard for how businesses should handle personal information.
What happened
Benetton Group S.r.l. stored customer data indefinitely and did not provide clear cookie choices for users.
Who was affected
Customers whose data was stored and who were affected by unclear cookie information.
What the authority found
The Italian DPA ruled that Benetton Group S.r.l. violated multiple GDPR articles regarding data protection and user consent.
Why this matters
This ruling highlights the importance of transparency and user control over personal data. Companies must implement proper security measures and clear cookie policies to avoid hefty fines.
GDPR Articles Cited
View original scraped data
Original data from scraper before AI verification against source document.
National Law Articles
The Italian DPA has imposed a fine of EUR 240,000 on Benetton Group S.r.l.. The controller had stored a large amount of customer data indefinitely. The DPA also found that the administrative database of employees of stores from 7 countries were accessible with a single password. The DPA considered this to be a breach of the obligation to implement appropriate technical and organizational measures to protect personal data. In assessing the fine, the DPA considered the fact that a very large number of people were affected by the data protection violations as an aggravating factor.
Violations (3)
Non-essential cookies (tracking, advertising) are placed on the user's device before obtaining valid consent.
Art. 6(1) GDPR
The cookie banner or cookie policy provides vague, incomplete, or unclear information about what cookies are used and why.
Art. 12, 13 GDPR
Users cannot select or deselect individual cookie categories; consent is presented as all-or-nothing.
Art. 4(11) GDPR
Related Enforcement Actions (0)
No other enforcement actions found for Benetton Group S.r.l. in IT
This is the only recorded action for this entity in this jurisdiction.
Similar Cases
Enforcement actions with similar violations
Details
Fine Date
27 April 2023
Authority
Garante per la protezione dei dati personali
Fine Amount
€240,000
Enforcement Tracker ID
ETid-1931
GDPRhub ID
gdprhub-6141About this data
Cite as: Cookie Fines. Benetton Group S.r.l. - Italy (2023). Retrieved from cookiefines.eu
Last updated: