In June 2024, the National Supervisory Authority for Personal Data Processing closed an investigation on the BEST ELAN ONLINE SRL data controller and found a breach of the provisions of Article 58 (1) of Regulation (EU) 2016/679.

In conclusion, the controller was sanctioned with a fine in the amount of Lei 4,977.1 (the equivalent of EUR 1,000).

The investigation was launched following a complaint from a data subject who reported receiving unsolicited commercial messages from the operator. Although the individual requested the deletion of his personal data, including by accessing a link provided by the controller to data subjects, the complainant did not receive any response to his request. The controller continued to send further unsolicited commercial messages to the data subject.

During the investigation, the controller did not submit to the National Supervisory Authority for Personal Data Processing the information requested on the basis of its investigative powers, thereby infringing the provisions of Article 58 (1) of Regulation (EU) 2016/679.

In addition to the penalty of the fine, the controller was ordered to submit to the National Supervisory Authority for Personal Data Processing all the information and documents requested during the investigation, according to the provisions of Article 58 (1) (a) and (e) of the Regulation.

Legal and Communication Department

A.N.S.P.D.C.P.