ANSPDCP (Romania) - Fine against Sephora Cosmetics România SA: Difference between revisions
From GDPRhub
(Created page with "{{DPAdecisionBOX |Jurisdiction=Romania |DPA-BG-Color=background-color:#ffffff; |DPAlogo=LogoRO.jpg |DPA_Abbrevation=ANSPDCP |DPA_With_Country=ANSPDCP (Romania) |Case_Number_...") |
m (: typo corrected) |
||
| Line 61: | Line 61: | ||
}} | }} | ||
Sephora Romania was fined EUR 2,000 for sending marketing communications via SMS after several objection requests have been | Sephora Romania was fined EUR 2,000 for sending marketing communications via SMS after several objection requests have been submitted. | ||
== English Summary == | == English Summary == | ||
=== Facts === | === Facts === | ||
Sephora Romania did not take into consideration the objection requests | Sephora Romania did not take into consideration the objection requests submitted by a data subject against marketing communications send via SMS. As a result, the data subject received several marketing SMS after the objection request and filed a complaint with the Romanian DPA. | ||
=== Holding === | === Holding === | ||
Revision as of 14:53, 23 August 2022
| ANSPDCP - Fine against Sephora Cosmetics România SA | |
|---|---|
 | |
| Authority: | ANSPDCP (Romania) |
| Jurisdiction: | Romania |
| Relevant Law: | Article 21 GDPR |
| Type: | Investigation |
| Outcome: | Violation Found |
| Started: | |
| Decided: | |
| Published: | 04.08.2022 |
| Fine: | 2000 EUR |
| Parties: | Sephora Cosmetics România SA |
| National Case Number/Name: | Fine against Sephora Cosmetics România SA |
| European Case Law Identifier: | n/a |
| Appeal: | Unknown |
| Original Language(s): | Romanian |
| Original Source: | ANSPDCP (in RO) |
| Initial Contributor: | Diana Rosu |
Sephora Romania was fined EUR 2,000 for sending marketing communications via SMS after several objection requests have been submitted.
English Summary
Facts
Sephora Romania did not take into consideration the objection requests submitted by a data subject against marketing communications send via SMS. As a result, the data subject received several marketing SMS after the objection request and filed a complaint with the Romanian DPA.
Holding
The DPA found that Sephora Romania continued to send several unsolicited marketing communications via SMS after multiple objection requests of the same data subject, in breach of Article 21 GDPR and fined it approximately EUR 2,000.
Comment
Share your comments here!
Further Resources
Share blogs or news articles here!
English Machine Translation of the Decision
The decision below is a machine translation of the Romanian original. Please refer to the Romanian original for more details.
08/04/2022 Fine for GDPR violation In July 2022, the National Supervisory Authority completed an investigation at the operator Sephora Cosmetics Romania SA and found a violation of the provisions of art. 21 of the General Data Protection Regulation. The operator of Sephora Cosmetics Romania SA was fined 9,883.60 lei (the equivalent of 2000 EURO). The investigation was started as a result of receiving a complaint from a petitioner claiming that she had received commercial SMS messages on her phone number from Sephora Cosmetics Romania SA. At the same time, she claimed that following her repeated requests, submitted at the end of 2020, that her data would no longer be used for marketing purposes, Sephora informed her at the beginning of 2021 that her data would no longer be processed for marketing purposes. marketing. However, later, during 2021, the petitioner received unsolicited commercial SMS messages from Sephora Cosmetics Romania SA. During the investigation carried out, it was found that Sephora Cosmetics Romania SA sent the petitioner, on her phone number, on several occasions, during 2021, commercial messages for marketing purposes, although she, through the requests sent to the operator in 2020, had exercised the right of opposition regarding the use of his own telephone number for marketing purposes. As such, Sephora Cosmetics Romania SA was sanctioned for violating the provisions of art. 21 of the General Data Protection Regulation, which guarantees the data subject the right to object at any time, for reasons related to the particular situation in which he is, to the processing of personal data concerning him. Legal and Communication Department A.N.S.P.D.C.P.
