# Asociația de Proprietari Aviației Park: Insufficient legal basis for data processing

- Type: Enforcement
- Source: Romanian National Supervisory Authority for Personal Data Processing (ANSPDCP)
- Date: 2022-06-20
- Original: https://www.enforcementtracker.com/ETid-1239
- Canonical: https://overview.legal/posts/47354
- Topics: Retention Period, Storage Limitation, Video Surveillance, Personal Data, Controllers, Processing, Processing Agreement, Data Controller, Monitoring, Supervisory Authorities

## Summary

The Romanian DPA has fined Asociația de Proprietari Aviației Park, operator of a residential facility, EUR 7,000. The controller had processed personal data (surname, first name, ID number and series, destination, arrival time, departure time, remarks) of delivery persons and/or couriers without a valid legal basis. In addition, the DPA found that the controller did not sufficiently inform the data subjects about the processing of their personal data. Furthermore, the DPA found that the controll

## Full text

The Romanian DPA has fined Asociația de Proprietari Aviației Park, operator of a residential facility, EUR 7,000. The controller had processed personal data (surname, first name, ID number and series, destination, arrival time, departure time, remarks) of delivery persons and/or couriers without a valid legal basis. In addition, the DPA found that the controller did not sufficiently inform the data subjects about the processing of their personal data. Furthermore, the DPA found that the controller did not establish a retention period for the personal data processed by a video surveillance system and kept them longer than necessary.

GDPR Articles: Art. 5 (1) a), c), e) GDPR, Art. 5 (2) GDPR, Art. 6 GDPR
Industry: Real Estate

---
Generated by overview.legal · https://overview.legal/posts/47354 · 2026-08-22