18.10.2022
Sanctions for the GDPR breach
1. The National Supervisory Authority finalized an investigation at Materiale Constructii Online SRL, as controller, within which it found the breach of the provisions of the General Data Protection Regulation.
Materiale Constructii Online SRL, as controller, was sanctioned with fine in amount of Lei 9,897.2 (the equivalent of EUR 2,000) for the breach of the provisions of Article 58 paragraph (1) in conjunction with Article 83 paragraph (5) from the General Data Protection Regulation.
The investigation was started following a complaint submitted by a claimant that reported that the representatives of the website www.depozit-online.ro did not respond to his/her requests for deletion of the account.
Within the written investigation performed at Materiale Constructii Online SRL, the owner of the website www.depozit-online.ro, it was found that this controller did not provide the information requested by the National Supervisory Authority through the addresses provided.
2. The National Supervisory Authority finalized another investigation at a natural person, as controller, within which it found the breach of the provisions of the General Data Protection Regulation.
The natural person, as controller, was sanctioned with fine in amount of Lei 729 (the equivalent of EUR 150) for the breach of the provisions of Article 6 paragraph (1) letter a) of the General Data Protection Regulation.
Within the investigation it was found that, as controller, a natural person that had access to certain data disclosed accidentally, used those data in an unauthorized manner, without having the consent of the person whose data were involved.
A.N.S.P.D.C.P.