DADA CREATION S.R.L.
- Country
- Romania
- Fine
- 5,000 EUR
- Date
- 24.11.20(24.11.20)
- Sector
- Private Sector
- Articles
- Article 32 (1) and (2)Article 33 (1)
Lack of organisational and technical measures, Failure to notify the data breach to the supervisory authority
Failure to implement adequate technical and organizational data in order to secure the processed data and to prevent unauthorized access to personal data (i.e. e-mail addresses, telephone numbers, name, surname, age of minors, delivery address, order number, the total amount of order, ordered products and date of order) on the website of the controller has led to the breach of confidentiality of personal data of 1091 data subjects. Also, the controller failed to notify the personal data breach to the supervisory authority.