Details:

Summary The Italian DPA has fined Cosmopol Security S.p.A. EUR 20,000. An individual had filed a complaint with the DPA against the controller. The individual had received invoices without ever having had a contractual relationship with the company. Therefore, the data subject requested information on the origin of their personal data. However, the controller did not respond to the data subject’s request for information in a timely manner.
Link: link
Related articles:  Art. 12 (3) GDPR, Art. 15 GDPR
Type: Insufficient fulfilment of data subjects rights
Fine: EUR 20,000
Sector Industry and Commerce

 

All data is based on The CMS’s Law GDPR Enforcement Tracker Source: https://www.enforcementtracker.com/

Tags: case law