# Fan Courier Express S.R.L.: Insufficient fulfilment of data subjects rights

- Type: Enforcement
- Source: Romanian National Supervisory Authority for Personal Data Processing (ANSPDCP)
- Date: 2025-11-12
- Original: https://www.enforcementtracker.com/ETid-2931
- Canonical: https://overview.legal/posts/49046
- Topics: Personal Data, Controllers, Processing Agreement, Data Controller, Processing, Supervisory Authorities, Law Enforcement, Supervision

## Summary

The Romanian DPA has imposed a fine of EUR 4,000 on Fan Courier Express S.R.L. The controller failed to adequately react to a data subject's request to exercise their rights, and also processed data without sufficient legal basis.

## Full text

The Romanian DPA has imposed a fine of EUR 4,000 on Fan Courier Express S.R.L. The controller failed to adequately react to a data subject's request to exercise their rights, and also processed data without sufficient legal basis.

GDPR Articles: Art. 5 (1) a), c), e) GDPR, Art. 6 (1) GDPR, Art. 12 (2), (3), (4) GDPR, Art. 15 (1), (3) GDPR, Art. 17 GDPR
Industry: Transportation and Energy

---
Generated by overview.legal · https://overview.legal/posts/49046 · 2026-08-22