Romania

AMATO BESTSELLER S.R.L

45,000 €

GDPR enforcement action by Romanian National Supervisory Authority for Personal Data Processing (ANSPDCP) on 2026-08-06.

Rank · Sector

#116

of 608 in Industry and Commerce

Rank · Romania

of 292

Rank · All fines

#782

of 3,085

Case details

Authority: Romanian National Supervisory Authority for Personal Data Processing (ANSPDCP)
Date: 2026-08-06
Controller / Processor: AMATO BESTSELLER S.R.L
Sector: Industry and Commerce
Quoted Articles: Art. 32 (4) GDPR, Art. 14 GDPR, Art. 5 (1) c) GDPR, Art. 9 GDPR
Type of violation: Non-compliance with general data processing principles

Summary

The Romanian DPA has imposed a fine of EUR 45,000 on AMATO BESTSELLER S.R.L. The controller failed to provide their employees with training on accurate procedures to ensure the security of personal data and did not implement adequate security measures. The controller's employees had access to vast amounts of personal data belonging to data subjects, including names, phone numbers, relationships between data subjects, marital status, health plan data, area of residence, social category classification and income details. The controller did not adequately inform data subjects about the processing of their personal data and processed data excessively, including special categories of personal data.

Open original source Links to the regulator's original publication or another source.