Romania

Wens Experience SRL

1,500 €

GDPR enforcement action by Romanian National Supervisory Authority for Personal Data Processing (ANSPDCP) on 2022-06-08.

Rank · Sector

#492

of 597 in Industry and Commerce

Rank · Romania

#224

of 283

Rank · All fines

#2,510

of 3,050

Case details

Authority: Romanian National Supervisory Authority for Personal Data Processing (ANSPDCP)
Date: 2022-06-08
Controller / Processor: Wens Experience SRL
Sector: Industry and Commerce
Quoted Articles: Art. 28 (2) GDPR
Type of violation: Insufficient data processing agreement

Summary

The Romanian DPA has imposed a fine of EUR 1,500 on Wens Experience SRL.

In the course of its investigation, the DPA found that Wens Experience, in the course of acting as a processor on behalf of the controller, had engaged another processor to process employee data without having obtained prior authorization from the controller.

This constitutes a violation of Art. 28 (2) GDPR.

Open original source Links to the regulator's original publication or another source.