The Italian Data Protection Authority (Garante) imposed two fines of €11,5 million total on Eni Gas and Luce because of the unlawful processing of personal data during an advertising campaign as well as for the activation of unsolicited contracts. This first fine of €8,5 million was issued for the unlawful processing of personal data in the context of a marketing campaign. The company made promotional calls without the consent of the contacted people and refused to acknowledge people's wishes to be added onto a "do not contact" list. The company also did not provide an opt-out procedure for these unsolicited calls. The DPA also determined that the company lacked sufficient technical and organizational measures to protect users' personal data. Data was also processed longer than the allowed retention period. According to the DPA, some data was also collected from third party entities that did not have consent from the data subjects to disclose that data.
the italian data protection authority garante imposed two s of  million total on eni gas and luce because of the unlawful processing of personal data during an advertising campaign as well as for the activation of unsolicited contracts this first  of  million was issued for the unlawful processing of personal data in the context of a marketing campaign the company made promotional calls without the consent of the contacted people and refused to acknowledge peoples wishes to be added onto a do not contact list the company also did not provide an optout procedure for these unsolicited calls the dpa also determined that the company lacked sufficient technical and organizational measures to protect users personal data data was also processed longer than the allowed retention period according to the dpa some data was also collected from third party entities that did not have consent from the data subjects to disclose that data
 italian data protection authority garante impose two    million total  eni gas  luce    unlawful process  personal data   advertise campaign  well    activation  unsolicited contract  first    million  issue   unlawful process  personal data   context   market campaign  company make promotional call without  consent   contact people  refuse  acknowledge people wish   add onto    contact list  company also   provide  optout procedure   unsolicited call  dpa also determine   company lack sufficient technical  organizational measure  protect users personal data data  also process longer   allow retention period accord   dpa  data  also collect  third party entities     consent   data subject  disclose  data