Wind Tre S.p.A. fined EUR 16.7 mil

On 13/Jul/2020, Wind Tre S.p.A. received a privacy fine of EUR 16,700,000. The enforcement authority (Italian Data Protection Authority) has cited these legal provisions in imposing the fine on Wind Tre S.p.A.: Article 12 GDPR/ Article 5 GDPR/ Article 6 GDPR/ GDPR/


Date of enforcement action:
Jurisdiction: Fine imposed:
Italy Flag for Italy, which is the jurisdiction taking enforcement action EUR 16,700,000
Defendant company or entity: Industry segment:
Wind Tre S.p.A. Telecoms /

Case summary

The Italian data protection authority (‘Garante’) announced, on 13 July 2020, that it had issued a decision (‘the Decision’) fining Wind Tre S.p.A. €16.7 million for several unlawful data processing activities in relation to direct marketing practices. In particular, Garante outlined that hundreds of complainants claimed that they received unsolicited communications, sent without their previous consent, through SMS, email, phone calls, and automated calls. In addition, Garante highlighted that the individual claimants argued that they have not been able to exercise their right to withdraw consent and to oppose the processing for direct marketing purposes, since the information contained in the privacy policy was incomplete in relation to the means of contact used. Moreover, Garante stated that the claimants’ data was published on telephone public lists despite their opposition. Furthermore, Garante found that Wind Tre’s apps ‘MyWind’ and ‘My3’ were set in order to oblige the user to provide his/her consent for different processing activities with every access, leaving the possibility to withdraw the same only after 24 hours. In addition, Garante pointed that Wind Tre presented various deficiencies in the management of third-party partners, even in relation to the unlawful activation of contracts.

As a result, Garante found that Wind Tre’s conduct amounted to a violation of Articles 5(1) and (2), 6(1)(a), 12, 24, and 25 of the General Data Protection Regulation (Regulation (EU) 2016/679) (‘GDPR’). Moreover, Garante prohibited Wind Tre’s processing of data collected without consent, as well as ordering the adoption of adequate technical and organisational measures to effectively control third-party partners.

(OneTrust Data Guidance)

Applicable legal provisions

Enforcement information

Enforcement authority: Type of enforcement action:
Italian Data Protection Authority Flag for Italy, which is the jurisdiction taking enforcement action Penalty notice
Subject to appeal?
Not known

Cite this fine in your work

Data Privacy Fines Index. (2020-07-13 02:48) Wind Tre S.p.A. fined EUR 16.7 mil. Retrieved from

Entry last updated: 2020-11-06 03:18 GMT.