UTTIS INDUSTRIES SRL
€2,500
Insufficient fulfilment of information obligations
Decision Date
17 de outubro de 2019
Authority
Romanian National Supervisory Authority for Personal Data Processing (ANSPDCP)
RO
Sector
Employment
Country
RO
Law
GDPRStatus
FINALDescription
The sanctions were applied to the controller because he could not prove that the data subjects were informed about the processing of personal data / images through the video surveillance system, which they have been operating since 2016. And because he made the disclosure of the CNP of the employees, by displaying the Report for the training of the authorized ISCIR personnel for the year 2018 to the company notifier and could not prove the legality of the processing of the CNP, by disclosure, according to Art. 6 GDPR.
Legal Citations
Art. 12Art. 13Art. 5 (1)Art. 6
Issues & Violations
Insufficient fulfilment of information obligations