SC Enel Energie S.A. (Electricity Distributor): Insufficient legal basis for data processing

The sanctions were imposed following a complaint alleging that Enel Energie had unlawfully processed an individual's personal data and was unable to prove that it had obtained the individual's consent to send e-mail notifications. In addition, the ANSPDCP pointed out that the operator had not taken the necessary measures to stop the transmission of notifications, despite the fact that the person had repeatedly exercised his right to object. The operator of SC Enel Energie SRL was sanctioned contraventionally with two fines, each amounting to 14,334.30 lei, the equivalent of the amount of 3000 EUR.

GDPR Articles: Art. 5 GDPR, Art. 6 GDPR, Art. 7 GDPR, Art. 21 GDPR
Industry: Transportation and Energy