Enforcement · Romanian National Supervisory Authority for Personal Data Processing (ANSPDCP) EN LLM context A cited markdown file you can paste into your AI assistant (ChatGPT, Claude, a RAG or project knowledge base) to ground it in this document. Contains: this document’s text, its sections with their topics, and the full text of every law provision it applies. Everything links back to its source on overview.legal — legal information, not advice.
CDI Transport Intern și Internațional SRL: Insufficient fulfilment of data subjects rights
The Romanian DPA has imposed a fine of EUR 7,000 on CDI Transport Intern și Internațional SRL.
Full text
The Romanian DPA has imposed a fine of EUR 7,000 on CDI Transport Intern și Internațional SRL. During its investigation, the DPA found that the company's website did not provide information on what rights data subjects are entitled to under the GDPR and how they can exercise those rights. In addition, the company had failed to provide the DPA with requested information in a timely manner.
Industry: Transportation and Energy
How it connects
References
Related across sources
C-311/18 Data Protection Commissioner v Facebook Ireland and Maximillian Schrems C-311/18 (Schrems II) CJEU Jul 16, 2020 Privacy Shield Processing Agreement International Transfer
C-807/21 Deutsche Wohnen SE v Staatsanwaltschaft Berlin C-807/21 (Deutsche Wohnen) CJEU Dec 5, 2023 Fines Public Authority Processors
Guidelines 02/2022 application of Article 60 GDPR Guidelines ·EDPB Mar 14, 2022 Supervision Supervisory Authorities Processors
Opinion 7/2024 EU Cloud Service Data Protection (Auditor) certification criteria ·Opinion ·EDPB Apr 19, 2024 Certification Supervision Supervisory Authorities
Opinion 15/2023 Brand Compliance certification criteria ·Opinion ·EDPB Sep 19, 2023 Certification Supervision Supervisory Authorities
Opinion 25/2025 BOX Group — processor BCRs ·Opinion ·EDPB Oct 7, 2025 International Transfer Processors Codes of Conduct