SC Enel Energie S.A. (Electricity Distributor)
Insufficient legal basis for data processing
Datum rozhodnutí
16. prosince 2019
Úřad
Romanian National Supervisory Authority for Personal Data Processing (ANSPDCP)
RO
Sektor
Transportation and Energy
Země
RO
Právo
GDPRStav
FINALPopis
The sanctions were imposed following a complaint alleging that Enel Energie had unlawfully processed an individual's personal data and was unable to prove that it had obtained the individual's consent to send e-mail notifications. In addition, the ANSPDCP pointed out that the operator had not taken the necessary measures to stop the transmission of notifications, despite the fact that the person had repeatedly exercised his right to object. The operator of SC Enel Energie SRL was sanctioned contraventionally with two fines, each amounting to 14,334.30 lei, the equivalent of the amount of 3000 EUR.