Sanction RGPD Romanian National Supervisory Authority for Personal Data Processing (ANSPDCP) — Dante International SA : 40 k€ (2023)

Autorité de contrôle
Romanian National Supervisory Authority for Personal Data Processing (ANSPDCP)
Pays
Roumanie
Entreprise / secteur
Dante International SA
Montant de l'amende
40 k€
Date de la décision
20 juin 2023
Fondement juridique
Art. 12 (2), Art. 17 (1)
Manquement
Droits des personnes non respectés

Résumé des faits

The Romanian DPA has imposed a fine of EUR 40,000 on Dante International SA. During its investigation, the DPA found that the controller had failed to properly comply with a deletion request from a data subject. In addition, the employees were not properly trained to handle data subject requests. Finally, the DPA found that despite requests from a data subject to delete their email, the controller continued to process it without their consent.

Décision officielle

Romanian National Supervisory Authority for Personal Data Processing (ANSPDCP)

Évaluer votre conformité RGPD avec Data Comply One