Italian regulator has fined company Foodinho S.R.R.L.L. for 5 million euros for illegally tracking the geolocation of couriers, even outside of working hours. Foodinho is a part of the International Deliveryhero delivery service and was acquired by Spanish company Glovo in 2016, expanding its presence in the Italian market. The company is accused of violating personal data processing for more than 35,000 couriers.
An investigation revealed that data on the drivers’ locations were being transferred to third parties without their knowledge, even when they were at home. It was also discovered that the platform was automatically sending standard notifications about account details without providing information on the appeal process or access restoration, in violation of GDPR requirements.
The regulator has instructed the company to include a special icon notifying users of GPS tracking on the platform and to have algorithm solutions checked by qualified employees. Additionally, they must prevent discriminatory use of reputation mechanisms based on customer reviews, comply with remote employee monitoring laws, and are prohibited from using biometric information to confirm employee identities.