DANTE INTERNATIONAL SA
€40,000
Insufficient fulfilment of data subjects rights
Date de décision
20 juin 2023
Autorité
Romanian National Supervisory Authority for Personal Data Processing (ANSPDCP)
RO
Secteur
Industry and Commerce
Pays
RO
Droit
GDPRStatut
FINALDescription
The Romanian DPA has imposed a fine of EUR 40,000 on Dante International SA. During its investigation, the DPA found that the controller had failed to properly comply with a deletion request from a data subject. In addition, the employees were not properly trained to handle data subject requests. Finally, the DPA found that despite requests from a data subject to delete their email, the controller continued to process it without their consent.
Citations légales
Art. 12 (2)Art. 17 (1)
Questions et violations
Insufficient fulfilment of data subjects rights