The National Supervisory Authority finalised in July, current year, an investigation at Asociația Asistenței Rutiere A-Car Vaslui, controller subject to the application of the provisions of art. 2 paragraph (1) letter a) of Law no. 190/2018.

The investigation was started following an intimation regarding the fact that Asociația Asistenței Rutiere A-Car Vaslui processes personal data of the children (image), through the website www.a-carvaslui.ro.

Given that during the investigation the controller did not answer to the requests of our institution, first it was been sanctioned with a reprimand for the breach of Article 58 paragraph (1) letters a) and e) of the Regulation (EU) 2016/679, based on Article 13 of Law no. 190/2018.

Also, the National Supervisory Authority issued the remediation plan provided under Article 13 paragraph (1) of Law no. 190/2018, with the measure to provide all the documents requested by our institution within 5 working days from the communication of the minutes.

Asociația Asistenței Rutiere A-Car Vaslui did not fulfil the measures provided within the remediation plan communicated by the National Supervisory Authority, thus breaching the provisions of Article 58 paragraph (1) letters a) and e) from the Regulation (EU) 2016/679.

Therefore, based on Article 14 paragraph (1) of Law no. 190/2018, the controller was sanctioned with a fine in amount of Lei 10,000, for the deed provided by Article 14 paragraph (5) letter e) of Law no. 190/2018, corroborated with Article 58 paragraph (1) letters a) and e) from Regulation (EU) 2016/679.

Legal and Communication Department

ANSPDCP