DANTE INTERNATIONAL SA
€40,000
Insufficient fulfilment of data subjects rights
Decision Date
June 20, 2023
Authority
Romanian National Supervisory Authority for Personal Data Processing (ANSPDCP)
RO
Sector
Industry and Commerce
Country
RO
Law
GDPRStatus
FINALDescription
The Romanian DPA has imposed a fine of EUR 40,000 on Dante International SA. During its investigation, the DPA found that the controller had failed to properly comply with a deletion request from a data subject. In addition, the employees were not properly trained to handle data subject requests. Finally, the DPA found that despite requests from a data subject to delete their email, the controller continued to process it without their consent.
Legal Citations
Art. 12 (2)Art. 17 (1)
Issues & Violations
Insufficient fulfilment of data subjects rights