Export
Fine against Dormeo Home S.R.L
Dormeo Home S.R.L. (the controller), received a request from one of its customers (the data subject) exercising their right to object to direct marketing.
StatusNot cited by any decision here yet
Holding
The DPA held that the controller had violated Article 21 GDPR by continuing to contact the data subject for direct marketing purposes after the data subject had exercised their right to object. The DPA considered that the continued transmission of marketing calls and SMS messages constituted unlawful processing of personal data and demonstrated the controller's failure to give effect to the data subject's objection request. In addition, as a corrective measure, the DPA ordered the controller to adopt appropriate technical and organisational measures to ensure GDPR-compliant marketing activities and the effective exercise of data subjects' rights. Finally, the Romanian DPA fined the controller €2,000 (RON 10,517) for a breach of Article 21 GDPR.
From GDPRhub’s case note — a summary of the decision, not its own words.Read it in the text ↓
Despite this objection, the controller continued to send marketing calls and SMS messages to the data subject, who lodged a complaint with the Romanian DPA on this matter.
Full text2findings
Machine translation of the decision, via GDPRhub — not the official text.Read the original
September 8, 2026 Fine for GDPR Violation The National Supervisory Authority for Personal Data Processing completed, in August 2026, an investigation into the data controller Dormeo Home SRL and found a violation of the provisions of Article 21 of Regulation (EU) 2016/679. As a result, the controller was fined 10,517 lei (equivalent to 2,000 euros). The investigation was initiated following a complaint filed by a data subject alleging a possible violation of the provisions of Regulation (EU) 2016/679. The investigation revealed that, although the data subject had exercised their right to object, the controller failed to take measures to effectively comply with this right regarding telephone calls and text messages for direct marketing purposes. Consequently, the data subject continued to receive unsolicited telephone calls and text messages, which constitutes unlawful processing of personal data, carried out in violation of the provisions of Article 21 of the GDPR regarding the right to object.
At the same time, as part of the investigation, the controller was ordered to take appropriate technical and organizational measures to comply with the provisions of the GDPR, with regard to the processing of personal data for marketing purposes and to ensure effective compliance with the rights provided for by the GDPR by the controller and its authorized representatives. Legal and Communications Department A.N.S.P.D.C.P.