Romania

Selgros Cash & Carry SRL

3,000 €

GDPR enforcement action by Romanian National Supervisory Authority for Personal Data Processing (ANSPDCP) on 2025-06-26.

Rank · Sector

#391

of 595 in Industry and Commerce

Rank · Romania

#145

of 283

Rank · All fines

#2,121

of 3,042

Case details

Authority: Romanian National Supervisory Authority for Personal Data Processing (ANSPDCP)
Date: 2025-06-26
Controller / Processor: Selgros Cash & Carry SRL
Sector: Industry and Commerce
Quoted Articles: Art. 32 (1) b), d), (2) GDPR
Type of violation: Insufficient technical and organisational measures to ensure information security

Summary

The Romanian DPA has imposed a fine of EUR 3,000 on Selgros Cash & Carry SRL. The controller did not implement sufficient technical and organisational measures to ensure information security, resulting in a data breach.

Open original source Links to the regulator's original publication or another source.