Romania

Selgros Cash & Carry SRL

3,000 €

GDPR enforcement action by Romanian National Supervisory Authority for Personal Data Processing (ANSPDCP) on 2025-06-26.

Rank · Sector

#401

of 610 in Industry and Commerce

Rank · Romania

#152

of 292

Rank · All fines

#2,189

of 3,132

Case details

Authority: Romanian National Supervisory Authority for Personal Data Processing (ANSPDCP)
Date: 2025-06-26
Controller / Processor: Selgros Cash & Carry SRL
Sector: Industry and Commerce
Quoted Articles: Art. 32 (1) b), d), (2) GDPR
Type of violation: Insufficient technical and organisational measures to ensure information security

Summary

The Romanian DPA has imposed a fine of EUR 3,000 on Selgros Cash & Carry SRL. The controller did not implement sufficient technical and organisational measures to ensure information security, resulting in a data breach.

Open original source Links to the regulator's original publication or another source.