Romania Romania

Estee Lauder Romania

3,000 €

GDPR enforcement action by Romanian National Supervisory Authority for Personal Data Processing (ANSPDCP) on 2020-04-23.

Rank · Sector
#352
of 597 in Industry and Commerce
Rank · Romania
#111
of 283
Rank · All fines
#2,001
of 3,050

Case details

Authority
Romanian National Supervisory Authority for Personal Data Processing (ANSPDCP)
Date
2020-04-23
Controller / Processor
Estee Lauder Romania
Sector
Industry and Commerce
Quoted Articles
Art. 6 GDPR, Art. 7 GDPR, Art. 9 GDPR
Type of violation
Insufficient legal basis for data processing

Summary

Processing of personal data without sufficient legal basis including health data.

Open original source Links to the regulator's original publication or another source.

Related fines