Fine against There's an AI for that S.R.L
Status Not cited by any decision here yet
Holding
The ANSPDCP found that the controller’s website stored cookies that were not technically necessary on users’ devices. The authority also found that users were not provided with clear and complete information about these cookies and that their explicit consent had not been obtained before such cookies were placed. The ANSPDCP held that the controller violated Article 4(5)(a) and Article 4(5)(b) of Law No. 506/2004 on the processing of personal data and the protection of privacy in the electronic communications sector (implementing ePrivacy Directive). As a result, the authority imposed an administrative fine of RON 30,000 (€6,000) on the controller for processing data through non-essential cookies without proper information or consent.
From GDPRhub’s case note — a summary of the decision, not its own words. Read it in the text ↓
Full text
Machine translation of the decision, via GDPRhub — not the official text. Read the original
04.11.2025 Sanction for violation of Law no. 506/2004 The National Supervisory Authority for Personal Data Processing completed, in October 2025, an investigation at the operator THERE’S AN AI FOR THAT S.R.L and found a violation of the provisions of art. 4 para. (5) let. a) and b) of Law no. 506/2004 on the processing of personal data and the protection of privacy in the electronic communications sector. As such, the operator was sanctioned with a fine of 30,000 lei. The investigation was initiated following a complaint by an individual regarding a possible violation of the provisions of the legislation in the field of personal data protection. During the investigation, the National Supervisory Authority for Personal Data Processing found that on the website owned by the operator, cookies were stored that were not technically necessary on the users' equipment, without clear and complete information and without the express consent of the data subjects. In this context, the operator was fined for violating the provisions of art. 4 para. (5) let. a) and b) of Law no. 506/2004. Legal and Communication Department A.N.S.P.D.C.P