# Global Baby Brand SRL: Insufficient legal basis for data processing

- Type: Enforcement
- Source: Romanian National Supervisory Authority for Personal Data Processing (ANSPDCP)
- Date: 2023-05-23
- Original: https://www.enforcementtracker.com/ETid-1850
- Canonical: https://overview.legal/posts/47965
- Topics: Direct Marketing, Controllers, Consent, Personal Data, Processing Agreement, Processing, Marketing, Data Controller, Supervisory Authorities, Supervision

## Summary

The Romanian DPA has imposed a fine of EUR 1,000 on Global Baby Brand SRL. A person had filed a complaint with the DPA alleging that the controller had sent commercial SMS messages without their consent. In the course of its investigation, the DPA found that the controller could not prove that it had processed the data subject's telephone number for marketing purposes with the data subject's valid consent.

## Full text

The Romanian DPA has imposed a fine of EUR 1,000 on Global Baby Brand SRL. A person had filed a complaint with the DPA alleging that the controller had sent commercial SMS messages without their consent. In the course of its investigation, the DPA found that the controller could not prove that it had processed the data subject's telephone number for marketing purposes with the data subject's valid consent.

GDPR Articles: Art. 7 GDPR
Industry: Industry and Commerce

---
Generated by overview.legal · https://overview.legal/posts/47965 · 2026-08-22