The National Supervisory Authority for Personal Data Processing, completed, in August 2025, an investigation at the controller Dumitrescu Mihai-Ovidiu and found a violation of the provisions of Article 4 paragraph (5) letters a) and b) of Law no. 506/2004.

As such, the controller was sanctioned with a fine of 37,000 lei.

The investigation carried out at the controller was initiated following the receipt of a notification regarding the violation of data protection legislation.

During the investigation, our institution found that, on the websites owned by the controller, the installation of cookie modules was allowed, which were not technically necessary before users expressed their consent in advance.

At the same time, it was found that the controller also used traffic monitoring technologies to generate and place malicious advertisements on the terminal equipment of end users, obtaining income during the period 01.09.2023-01.04.2025.

Legal and Communication Department

A.N.S.P.D.C.P