Enforcement · Romanian National Supervisory Authority for Personal Data Processing (ANSPDCP) EN LLM context A cited markdown file you can paste into your AI assistant (ChatGPT, Claude, a RAG or project knowledge base) to ground it in this document. Contains: this document’s text, its sections with their topics, and the full text of every law provision it applies. Everything links back to its source on overview.legal — legal information, not advice.
Asociația de Proprietari Aviației Park: Insufficient legal basis for data processing
How it connects
Related across sources
Guidance EDPB Annual Report 2021 Guidance Opinion 34/2025 on the draft decision of the Greek Supervisory Authority regarding C.E.C.L certification criteria Guidance Art. 29 WP Guidelines on GDPR transparency requirements (WP260 rev.01) Literature The data subject’s right to access to information under GDPR and the right of the data controller to protect its know-how Guidance Guidelines 05/2022 on the use of facial recognition technology in the area of law enforcement Guidance EDPB Annual Report 2022
Full text
The Romanian DPA has fined Asociația de Proprietari Aviației Park, operator of a residential facility, EUR 7,000. The controller had processed personal data (surname, first name, ID number and series, destination, arrival time, departure time, remarks) of delivery persons and/or couriers without a valid legal basis. In addition, the DPA found that the controller did not sufficiently inform the data subjects about the processing of their personal data. Furthermore, the DPA found that the controller did not establish a retention period for the personal data processed by a video surveillance system and kept them longer than necessary.
Industry: Real Estate
Original document at the source www.dataprotection.ro