Romania

Crowd Entertainment Ltd

35,000 €

GDPR enforcement action by Romanian National Supervisory Authority for Personal Data Processing (ANSPDCP) on 2026-04-28.

Rank · Sector

#244

of 369 in Media, Telecoms and Broadcasting

Rank · Romania

of 283

Rank · All fines

#867

of 3,050

Case details

Authority: Romanian National Supervisory Authority for Personal Data Processing (ANSPDCP)
Date: 2026-04-28
Controller / Processor: Crowd Entertainment Ltd
Sector: Media, Telecoms and Broadcasting
Quoted Articles: Art. 5 (1) a), c), d), (2) GDPR
Type of violation: Insufficient legal basis for data processing

Summary

The Romanian DPA has imposed a fine of EUR 35,000 on Crowd Entertainment Ltd. The controller engaged in direct marketing activities without ensuring that it had a sufficient legal basis. Additionally, the controller processed data subjects' identification data excessively, beyond what was necessary for the processing purpose.

Open original source Links to the regulator's original publication or another source.