Sanction RGPD Romanian National Supervisory Authority for Personal Data Processing (ANSPDCP) — Wens Experience SRL : 2 k€ (2022)
- Autorité de contrôle
- Romanian National Supervisory Authority for Personal Data Processing (ANSPDCP)
- Pays
- Roumanie
- Entreprise / secteur
- Wens Experience SRL
- Montant de l'amende
- 2 k€
- Date de la décision
- 8 juin 2022
- Fondement juridique
- Art. 28 (2)
- Manquement
- Contrat de sous-traitance insuffisant
Résumé des faits
The Romanian DPA has imposed a fine of EUR 1,500 on Wens Experience SRL. In the course of its investigation, the DPA found that Wens Experience, in the course of acting as a processor on behalf of the controller, had engaged another processor to process employee data without having obtained prior authorization from the controller. This constitutes a violation of Art. 28 (2) GDPR.
Décision officielle
Romanian National Supervisory Authority for Personal Data Processing (ANSPDCP)