# Wens Experience SRL: Insufficient data processing agreement

- Type: Enforcement
- Source: Romanian National Supervisory Authority for Personal Data Processing (ANSPDCP)
- Date: 2022-06-08
- Original: https://www.enforcementtracker.com/ETid-1201
- Canonical: https://overview.legal/posts/47316
- Topics: Processors, Controllers, Processing Agreement, Employees, Human Resources, Data Processor, Processing, Supervisory Authorities, Personal Data, Data Controller

## Summary

The Romanian DPA has imposed a fine of EUR 1,500 on Wens Experience SRL. In the course of its investigation, the DPA found that Wens Experience, in the course of acting as a processor on behalf of the controller, had engaged another processor to process employee data without having obtained prior authorization from the controller. This constitutes a violation of Art. 28 (2) GDPR.

## Full text

The Romanian DPA has imposed a fine of EUR 1,500 on Wens Experience SRL. In the course of its investigation, the DPA found that Wens Experience, in the course of acting as a processor on behalf of the controller, had engaged another processor to process employee data without having obtained prior authorization from the controller. This constitutes a violation of Art. 28 (2) GDPR.

GDPR Articles: Art. 28 (2) GDPR
Industry: Industry and Commerce

---
Generated by overview.legal · https://overview.legal/posts/47316 · 2026-08-22