ANSPDCP (Romania) - Fine against SC Nobiotic Pharma SRL
|ANSPDCP (Romania) - Fine against SC Nobiotic Pharma SRL|
|Relevant Law:||Article 58(1)(a) GDPR|
Article 58(1)(e) GDPR
|Parties:||SC Nobiotic Pharma SRL|
|National Case Number/Name:||Fine against SC Nobiotic Pharma SRL|
|European Case Law Identifier:||n/a|
|Original Source:||ANSPDCP (in RO)|
|Initial Contributor:||Diana Rosu|
The Romanian DPA fined a wholesale pharmacist with approximately €2.000 because it ignored the DPA's request to provide information regarding its processing operations in violation of Article 58(1) GDPR.
English Summary[edit | edit source]
Facts[edit | edit source]
A data subject filed a complaint against wholesale pharmacist SC Nobiotic Pharma SRL because they received unsolicited commercial SMS messages and had their data processed for direct marketing purposes without consent. The Romanian DPA launched an investigation, and requested SC Nobiotic Pharma SRL to provide information regarding its processing operations and access to the processed personal data.
Holding[edit | edit source]
SC Nobiotic Pharma SRL did not answer the DPA's requests. Consequently, the DPA imposed a fine of approximately €2.000 (RON 9.890) for a violation of Article 58(1) GDPR.
Comment[edit | edit source]
This decision is focused on a similar industry to this one from last week, perhaps indicating that the Romanian DPA is taking a closer look at the processing activities of medical professionals.
Further Resources[edit | edit source]
Share blogs or news articles here!
English Machine Translation of the Decision[edit | edit source]
The decision below is a machine translation of the Romanian original. Please refer to the Romanian original for more details.
13.12.2021 & # 13; RGPD & # 13; & # 13; In November of this year, the National Supervisory Authority completed an investigation at the operator of SC Nobiotic Pharma SRL and found a violation of the provisions of art. 58 para. (1) of the General Data Protection Regulation. & # 13; As such, SC Nobiotic Pharma SRL was sanctioned with a fine in the amount of 9890 lei, the equivalent of 2000 EURO, for violating art. 58 para. (1) of the General Regulation on Data Protection, regarding the obligation of the operator to provide the necessary information to the National Supervisory Authority. & # 13; In this context, we specify that art. 58 para. (1) lit. a) and e) of the General Data Protection Regulation provide as follows: & # 13; "(1) Each supervisory authority shall have all the following powers of investigation: & # 13; a) to order the operator and the person authorized by the operator and, as the case may be, the representative of the operator or the person authorized by the operator to provide any information that the supervisory authority requests in order to carry out its tasks; & # 13; e) to obtain, from the operator and the person empowered by the operator, access to all personal data and to all information necessary for the performance of his tasks ”. & # 13; The investigation was carried out as a result of complaints by the petitioner claiming that the operator had sent him unsolicited commercial SMS messages without his consent. & # 13; As the operator did not comply with the request for information addressed by the National Supervisory Authority in the exercise of its powers, it was sanctioned with a fine. & # 13; & # 13; Legal and Communication Department & # 13; A.N.S.P.D.C.P.