1. On the 26th of November 2019, in the exercise of its investigative powers, the National Supervisory Authority sanctioned the controller Modern Barber S.R.L. with a fine in the amount of 14,329.5 lei, the equivalent of the amount of 3000 euros.
The sanction was applied to the controller Modern Barber S.R.L for the act provided by Article 83 paragraph (5) of Regulation (EU) 2016/679, related to Article 58 paragraph (1) letter a) and letter e) and in conjunction with Article 8 of Government Ordinance no. 2/2001.
Thus, Modern Barber S.R.L did not provide the information requested by the National Supervisory Authority, thus violating the provisions of Article 58 paragraph (1) letter a) and letter e) of Regulation (EU) 2016/679.
Therefore, the controller was sanctioned with a reprimand and a corrective measure consisting in obliging the controller to transmit to the Authority, in writing, all the requested information, within 10 calendar days from the communication of the report of the investigation was imposed.
Later it was found that the controller Modern Barber S.R.L did not fulfill the corrective measure and it was decided to impose a sanction.
At the same time, it was imposed also the corrective measure to sent to the Authority, in writing, all the requested information, within 5 calendar days from the communication of the report of the investigation.
2. On the 2nd of December 2019, in the exercise of its investigative powers, the National Supervisory Authority sanctioned the controller Nicola Medical Team 17 SRL with a fine in the amount of 9,555.4 lei, equivalent to the amount of 2000 euros, for the deed provided by Article 83 paragraphs (5) and (6) of Regulation (EU) 2016/679, related to Article 58 paragraph (1) letter a) and letter e) and in conjunction with Article 8 of Government Ordinance no. 2/2001.
Thus, Nicola Medical Team 17 SRL did not provide the information requested by the National Supervisory Authority, thus violating the provisions of Article 58 paragraph (1) letter a) and letter e) of Regulation (EU) 2016/679.
The controller was sanctioned with a reprimand and a corrective measure consisting in obliging the controller to transmit to the Authority, in writing, all the requested information, within 10 calendar days from the communication of the report of the investigation was imposed.
As the controller did not comply with the corrective measure ordered, a sanction was applied and, at the same time, it was imposed also the corrective measure to sent to the National Supervisory Authority, in writing, all the information requested previously regarding the conformity of hte processing opersaions performed as a controller, within 5 calendar days from the communication of the report of the investigation.
To read the press release in Romanian, click here
For further information, please contact the Romanian Supervisory Authority: anspdcp@dataprotection.ro