SC Spark Car Sharing SRL: Non-compliance with general data processing principles

The Romanian DPA has imposed a fine of EUR 1,000 on SC Spark Car Sharing SRL. An individual had filed a complaint with the DPA because the controller had processed their email address for third party marketing purposes without their consent. The DPA also noted that the individual had requested the deletion of all their data. Although the controller informed the customer it would delete their data, the controller continued to send a series of direct marketing messages to their email address.

GDPR Articles: Art. 5 (1) a), b) GDPR, Art. 6 (1) GDPR, Art. 7 GDPR
Industry: Transportation and Energy