Slovenia

Legal Entity

5,810 €

GDPR enforcement action by Slovenian Supervisory Authority (Informacijski pooblaščenec) on 2025-07-25.

Rank · Sector

#85

of 218 in Not assigned

Rank · Slovenia

of 17

Rank · All fines

#1,667

of 3,050

Case details

Authority: Slovenian Supervisory Authority (Informacijski pooblaščenec)
Date: 2025-07-25
Controller / Processor: Legal Entity
Sector: Not assigned
Quoted Articles: Art. 28 (3) GDPR
Type of violation: Insufficient data processing agreement

Summary

The Slovenian DPA has imposed a fine of EUR 5,810 on a legal entity. The controller employed a person authorised to perform clerical work. However, this person used a data processor to process personal data without a data processing agreement. The legal entity was fined €5,610, and the person responsible within the entity was fined €200.

Open original source Links to the regulator's original publication or another source.