SC Enel Energie SA – 6000 euros fine
The company SC Enel Energie SA has violated several provisions of the GDPR(Art. 5. para. 1, Art. 7 para. 1, Art. 6 as well as Art. 21 para. 1) when processing customer data.
Personal data were not processed in accordance with the principles. Furthermore, the company could not provide the data subject’s consent for the data processing and thus could not fulfill the accountability obligation. The data protection authority also found that objections to the data processing were ignored.
The data protection authority therefore imposed two fines of approximately 3,000 euros each on the company.
Entscheidungsdatum:
16.12.2019
Land:
Romania
Art des Verstoßes:
violated rights of the data subject
Betroffene Datensätze:
unknown
Waren sensible Daten betroffen?:
No
verhängte Geldstrafe:
€ 6,000,-
Violation of GDPR Paragraph:
21. Right to object
5. Principles relating to personal data processing
6. Lawfulness of processing
7. Conditions for consent
Quelle:
Communication from the Romanian Data Protection Authority (Romanian)