Romania

SC Spark Car Sharing SRL

1,000 €

GDPR enforcement action by Romanian National Supervisory Authority for Personal Data Processing (ANSPDCP) on 2023-10-25.

Rank · Sector

#158

of 167 in Transportation and Energy

Rank · Romania

#251

of 283

Rank · All fines

#2,677

of 3,050

Case details

Authority: Romanian National Supervisory Authority for Personal Data Processing (ANSPDCP)
Date: 2023-10-25
Controller / Processor: SC Spark Car Sharing SRL
Sector: Transportation and Energy
Quoted Articles: Art. 5 (1) a), b) GDPR, Art. 6 (1) GDPR, Art. 7 GDPR
Type of violation: Non-compliance with general data processing principles

Summary

The Romanian DPA has imposed a fine of EUR 1,000 on SC Spark Car Sharing SRL. An individual had filed a complaint with the DPA because the controller had processed their email address for third party marketing purposes without their consent. The DPA also noted that the individual had requested the deletion of all their data. Although the controller informed the customer it would delete their data, the controller continued to send a series of direct marketing messages to their email address.

Open original source Links to the regulator's original publication or another source.