Wens Experience SRL
€1,500
Insufficient data processing agreement
Datum för beslut
8 juni 2022
Myndighet
Romanian National Supervisory Authority for Personal Data Processing (ANSPDCP)
RO
Sektor
Industry and Commerce
Land
RO
Lag
GDPRStatus
FINALBeskrivning
The Romanian DPA has imposed a fine of EUR 1,500 on Wens Experience SRL. In the course of its investigation, the DPA found that Wens Experience, in the course of acting as a processor on behalf of the controller, had engaged another processor to process employee data without having obtained prior authorization from the controller. This constitutes a violation of Art. 28 (2) GDPR.
Rättsliga hänvisningar
Art. 28 (2)
Frågor och överträdelser
Insufficient data processing agreement