Romania Romania

Estee Lauder Romania

3,000 €

GDPR enforcement action by Romanian National Supervisory Authority for Personal Data Processing (ANSPDCP) on 2020-04-23.

Rank · Sector
#356
of 604 in Industry and Commerce
Rank · Romania
#115
of 289
Rank · All fines
#2,017
of 3,072

Case details

Authority
Romanian National Supervisory Authority for Personal Data Processing (ANSPDCP)
Date
2020-04-23
Controller / Processor
Estee Lauder Romania
Sector
Industry and Commerce
Quoted Articles
Art. 6 GDPR, Art. 7 GDPR, Art. 9 GDPR
Type of violation
Insufficient legal basis for data processing

Summary

Processing of personal data without sufficient legal basis including health data.

Open original source Links to the regulator's original publication or another source.

Related fines