Maybe also report it to the Italian data protection authority directly: https://www.garanteprivacy.it/