Enel Energie S.A.
- Country
- Romania
- Fine
- 3,000 EUR
- Date
- 2020-01-14
- Sector
- Private Sector
- Articles
- Article 5(1),d) and (2), Articles 6 and 7Article 21(1)
Infrigement of data accuracy principle Lack of legal basis for data processing Non-observance of the data subject's right to object
The sanctions were imposed on the basis of a complaint claiming that the controller illegally processed the data of the petitioner - the data subject - because the controller could not prove that he had obtained the consent of the data subject to receive communications to his e-mail address. In addition, the data controller did not take the appropriate measures to prevent the transmission of notifications, despite the fact that the data subject had repeatedly exercised his right to object.