The National Supervisory Authority for Personal Data Processing, completed, in October 2025, an investigation at the controller THERE’S AN AI FOR THAT S.R.L and found a violation of the provisions of Article 4 paragraph (5) letters a) and b) of Law no. 506/2004 on the processing of personal data and the protection of privacy in the electronic communications sector.

As such, the controller was sanctioned with a fine of 30,000 lei.

The investigation was initiated following a complaint from an individual regarding a possible violation of the provisions of the legislation in the field of personal data protection.

During the investigation, the National Supervisory Authority for Personal Data Processing found that cookies modules that were not technically necessary on the users’ equipment were stored on the website owned by the controller, without clear and complete information and without the express consent of the data subjects.

In this context, the controller was fined for violating the provisions of Article 4 paragraph (5) letters a) and b) of Law no. 506/2004.

Legal and Communication Department

A.N.S.P.D.C.P