Comitetul European pentru Protecția Datelor

The Romanian National Supervisory Authority sanctions Nicola Medical Team 17 SRL and Modern Barber S.R.L.

Monday, 2 December, 2019
ro

1. On the 26th of November 2019, in the exercise of its investigative powers, the National Supervisory Authority sanctioned the controller Modern Barber S.R.L. with a fine in the amount of 14,329.5 lei, the equivalent of the amount of 3000 euros.
The sanction was applied to the controller Modern Barber S.R.L for the act provided by Article 83 paragraph (5) of Regulation (EU) 2016/679, related to Article 58 paragraph (1) letter a) and letter e) and in conjunction with Article 8 of Government Ordinance no. 2/2001.
Thus, Modern Barber S.R.L did not provide the information requested by the National Supervisory Authority, thus violating the provisions of Article 58 paragraph (1) letter a) and letter e) of Regulation (EU) 2016/679.
Therefore, the controller was sanctioned with a reprimand and a corrective measure consisting in obliging the controller to transmit to the Authority, in writing, all the requested information, within 10 calendar days from the communication of the report of the investigation was imposed.
Later it was found that the controller Modern Barber S.R.L did not fulfill the corrective measure and it was decided to impose a sanction.
At the same time, it was imposed also the corrective measure to sent to the Authority, in writing, all the requested information, within 5 calendar days from the communication of the report of the investigation.
 
2. On the 2nd of December 2019, in the exercise of its investigative powers, the National Supervisory Authority sanctioned the controller Nicola Medical Team 17 SRL with a fine in the amount of 9,555.4 lei, equivalent to the amount of 2000 euros, for the deed provided by Article 83 paragraphs (5) and (6) of Regulation (EU) 2016/679, related to Article 58 paragraph (1) letter a) and letter e) and in conjunction with Article 8 of Government Ordinance no. 2/2001.
Thus, Nicola Medical Team 17 SRL did not provide the information requested by the National Supervisory Authority, thus violating the provisions of Article 58 paragraph (1) letter a) and letter e) of Regulation (EU) 2016/679.
The controller was sanctioned with a reprimand and a corrective measure consisting in obliging the controller to transmit to the Authority, in writing, all the requested information, within 10 calendar days from the communication of the report of the investigation was imposed.
As the controller did not comply with the corrective measure ordered, a sanction was applied and, at the same time, it was imposed also the corrective measure to sent to the National Supervisory Authority, in writing, all the information requested previously regarding the conformity of hte processing opersaions performed as a controller, within 5 calendar days from the communication of the report of the investigation.
 
To read the press release in Romanian, click here

For further information, please contact the Romanian Supervisory Authority: anspdcp@dataprotection.ro

The press release published here does not constitute official EDPB communication, nor an EDPB endorsement. This press release was originally published by the national supervisory authority and was published here at the request of the SA for information purposes. As the press release is represented here as it appeared on the SA's website or other channels of communication, the news item is only available in English or in the Member State's official language with a short introduction in English. Any questions regarding this press release should be directed to the supervisory authority concerned.