Romania Romania

Estee Lauder Romania

3,000 €

GDPR enforcement action by Romanian National Supervisory Authority for Personal Data Processing (ANSPDCP) on 2020-04-23.

Rank · Sector
#385
of 645 in Industry and Commerce
Rank · Romania
#122
of 298
Rank · All fines
#2,126
of 3,223

Case details

Authority
Romanian National Supervisory Authority for Personal Data Processing (ANSPDCP)
Date
2020-04-23
Controller / Processor
Estee Lauder Romania
Sector
Industry and Commerce
Quoted Articles
Art. 6 GDPR, Art. 7 GDPR, Art. 9 GDPR
Type of violation
Insufficient legal basis for data processing

Summary

Processing of personal data without sufficient legal basis including health data.

Open original source Links to the regulator's original publication or another source.

Related fines