ANSPDCP (Romania) - Fine against Dormeo Home S.R.L

Summary

The Romanian Data Protection Authority (ANSPDCP) has fined Dormeo Home S.R.L. €2,000 (RON 10,517) for violating Article 21 of the GDPR. The bedding retailer continued to send marketing calls and SMS messages to a customer even after the customer exercised their right to object to direct marketing. The ANSPDCP deemed this unlawful processing of personal data and ordered Dormeo Home to implement measures to ensure GDPR-compliant marketing.

Full text

Help ANSPDCP (Romania) - Fine against Dormeo Home S.R.L: Difference between revisions From GDPRhub Jump to:navigation, search Newer edit →VisualWikitext Revision as of 09:56, 15 September 2026 view sourceCerasela (talk | contribs)14 edits Tag: Decisions [1.0] Revision as of 12:58, 15 September 2026 view source Ls (talk | contribs)Bureaucrats, Interface administrators, noContributionReport, Administrators410 editsTag: Visual editNewer edit → Line 84: Line 84: }}}} The Romanian DPA fined a bedding retailer RON 10,517 (€2,000) for infringing Art. 21 GDPR by continuing to send marketing calls and SMS messages after the data subject exercised their right to object.The Romanian DPA fined a bedding retailer RON 10,517 (€2,000) for infringing [[Article 21 GDPR]] by continuing to send marketing calls and SMS messages after the data subject exercised their right to object. == English Summary ==== English Summary == Line 90: Line 90: === Facts ====== Facts === Dormeo Home S.R.L. (the controller), received a request from one of its customers (the data subject) exercising their right to object to direct marketing. Despite this objection, the controller continued to send marketing calls and SMS messages to the data subject, who lodged a complaint with the Romanian DPA on this matter.Dormeo Home S.R.L. (the controller), received a request from one of its customers (the data subject) exercising their right to object to direct marketing. Despite this objection, the controller continued to send marketing calls and SMS messages to the data subject, who lodged a complaint with the Romanian DPA on this matter. === Holding ====== Holding === The DPA held that the controller had violated [[Article 21 GDPR|Article 21 GDPR]] by continuing to contact the data subject for direct marketing purposes after the data subject had exercised their right to object. The DPA considered that the continued transmission of marketing calls and SMS messages constituted unlawful processing of personal data and demonstrated the controller's failure to give effect to the data subject's objection request.The DPA held that the controller had violated [[Article 21 GDPR]] by continuing to contact the data subject for direct marketing purposes after the data subject had exercised their right to object. The DPA considered that the continued transmission of marketing calls and SMS messages constituted unlawful processing of personal data and demonstrated the controller's failure to give effect to the data subject's objection request. In addition, as a corrective measure, the DPA ordered the controller to adopt appropriate technical and organisational measures to ensure GDPR-compliant marketing activities and the effective exercise of data subjects' rights.In addition, as a corrective measure, the DPA ordered the controller to adopt appropriate technical and organisational measures to ensure GDPR-compliant marketing activities and the effective exercise of data subjects' rights. Finally, the Romanian DPA fined the controller €2,000 (RON 10,517) for a breach of [[Article 21 GDPR|Article 21 GDPR]].Finally, the Romanian DPA fined the controller €2,000 (RON 10,517) for a breach of [[Article 21 GDPR]]. == Comment ==== Comment == This decision confirms that, as direct marketing practices become more widespread, controllers must ensure the effective enforcement of data subjects’ rights, in particular the right to object.This decision confirms that, as direct marketing practices become more widespread, controllers must ensure the effective enforcement of data subjects’ rights, in particular the right to object. Revision as of 12:58, 15 September 2026 ANSPDCP - Fine against Dormeo Home S.R.L Authority: ANSPDCP (Romania) Jurisdiction: Romania Relevant Law: Article 21 GDPR Type: Investigation Outcome: Violation Found Started: Decided: Published: 08.09.2026 Fine: 10517.0 RON Parties: Dormeo Home SRL National Case Number/Name: Fine against Dormeo Home S.R.L European Case Law Identifier: n/a Appeal: n/a Original Language(s): Romanian Original Source: ANSPDCP (in RO) Initial Contributor: cerasela The Romanian DPA fined a bedding retailer RON 10,517 (€2,000) for infringing Article 21 GDPR by continuing to send marketing calls and SMS messages after the data subject exercised their right to object. Contents 1 English Summary 1.1 Facts 1.2 Holding 2 Comment 3 Further Resources 4 English Machine Translation of the Decision English Summary Facts Dormeo Home S.R.L. (the controller), received a request from one of its customers (the data subject) exercising their right to object to direct marketing. Despite this objection, the controller continued to send marketing calls and SMS messages to the data subject, who lodged a complaint with the Romanian DPA on this matter. Holding The DPA held that the controller had violated Article 21 GDPR by continuing to contact the data subject for direct marketing purposes after the data subject had exercised their right to object. The DPA considered that the continued transmission of marketing calls and SMS messages constituted unlawful processing of personal data and demonstrated the controller's failure to give effect to the data subject's objection request. In addition, as a corrective measure, the DPA ordered the controller to adopt appropriate technical and organisational measures to ensure GDPR-compliant marketing activities and the effective exercise of data subjects' rights. Finally, the Romanian DPA fined the controller €2,000 (RON 10,517) for a breach of Article 21 GDPR. Comment This decision confirms that, as direct marketing practices become more widespread, controllers must ensure the effective enforcement of data subjects’ rights, in particular the right to object. Further Resources Share blogs or news articles here! English Machine Translation of the Decision The decision below is a machine translation of the Romanian original. Please refer to the Romanian original for more details. September 8, 2026 Fine for GDPR Violation The National Supervisory Authority for Personal Data Processing completed, in August 2026, an investigation into the data controller Dormeo Home SRL and found a violation of the provisions of Article 21 of Regulation (EU) 2016/679. As a result, the controller was fined 10,517 lei (equivalent to 2,000 euros). The investigation was initiated following a complaint filed by a data subject alleging a possible violation of the provisions of Regulation (EU) 2016/679. The investigation revealed that, although the data subject had exercised their right to object, the controller failed to take measures to effectively comply with this right regarding telephone calls and text messages for direct marketing purposes. Consequently, the data subject continued to receive unsolicited telephone calls and text messages, which constitutes unlawful processing of personal data, carried out in violation of the provisions of Article 21 of the GDPR regarding the right to object. At the same time, as part of the investigation, the controller was ordered to take appropriate technical and organizational measures to comply with the provisions of the GDPR, with regard to the processing of personal data for marketing purposes and to ensure effective compliance with the rights provided for by the GDPR by the controller and its authorized representatives. Legal and Communications Department A.N.S.P.D.C.P. Retrieved from "https://gdprhub.eu/index.php?title=ANSPDCP_(Romania)_-_Fine_against_Dormeo_Home_S.R.L&oldid=53027" Categories: ANSPDCP (Romania)RomaniaArticle 21 GDPR2026Romanian This page was last edited on 15 September 2026, at 12:58. Content is available under Creative Commons Attribution-NonCommercial-ShareAlike unless otherwise noted. Privacy policy About GDPRhub Disclaimers

Entities