Romania

SC Spark Car Sharing SRL

1,000 €

GDPR enforcement action by Romanian National Supervisory Authority for Personal Data Processing (ANSPDCP) on 2023-10-25.

Rank · Sector

#163

of 172 in Transportation and Energy

Rank · Romania

#259

of 292

Rank · All fines

#2,708

of 3,085

Case details

Authority: Romanian National Supervisory Authority for Personal Data Processing (ANSPDCP)
Date: 2023-10-25
Controller / Processor: SC Spark Car Sharing SRL
Sector: Transportation and Energy
Quoted Articles: Art. 5 (1) a), b) GDPR, Art. 6 (1) GDPR, Art. 7 GDPR
Type of violation: Non-compliance with general data processing principles

Summary

The Romanian DPA has imposed a fine of EUR 1,000 on SC Spark Car Sharing SRL. An individual had filed a complaint with the DPA because the controller had processed their email address for third party marketing purposes without their consent. The DPA also noted that the individual had requested the deletion of all their data. Although the controller informed the customer it would delete their data, the controller continued to send a series of direct marketing messages to their email address.

Open original source Links to the regulator's original publication or another source.