ANSPDCP (Romania) - Fine against Dormeo Home S.R.L

Summary

The Romanian Data Protection Authority (ANSPDCP) has fined Dormeo Home S.R.L. €2,000 (RON 10,517) for violating Article 21 of the GDPR. The company continued to send marketing calls and SMS messages to a customer even after the customer exercised their right to object to direct marketing. The DPA found this to be unlawful processing of personal data and ordered the company to implement measures for GDPR-compliant marketing.

Full text

Help ANSPDCP (Romania) - Fine against Dormeo Home S.R.L: Difference between revisions From GDPRhub Jump to:navigation, search ← Older editVisualWikitext Revision as of 12:58, 15 September 2026 view sourceLs (talk | contribs)Bureaucrats, Interface administrators, noContributionReport, Administrators410 editsTag: Visual edit← Older edit Latest revision as of 13:09, 15 September 2026 view source Lh (talk | contribs)Bureaucrats, Interface administrators, noContributionReport, Administrators53 editsTag: Visual edit Line 98: Line 98: == Comment ==== Comment == This decision confirms that, as direct marketing practices become more widespread, controllers must ensure the effective enforcement of data subjects’ rights, in particular the right to object.This decision confirms that, as direct marketing practices become more widespread, controllers must ensure the effective enforcement of data subjects’ rights, in particular the right to object. Also, it is worth pointing out that in this case, the Romanian DPA acted upon a complaint by a data subject, in contrast to many previous decisions where the DPA initiated the investigation. == Further Resources ==== Further Resources == Latest revision as of 13:09, 15 September 2026 ANSPDCP - Fine against Dormeo Home S.R.L Authority: ANSPDCP (Romania) Jurisdiction: Romania Relevant Law: Article 21 GDPR Type: Investigation Outcome: Violation Found Started: Decided: Published: 08.09.2026 Fine: 10517.0 RON Parties: Dormeo Home SRL National Case Number/Name: Fine against Dormeo Home S.R.L European Case Law Identifier: n/a Appeal: n/a Original Language(s): Romanian Original Source: ANSPDCP (in RO) Initial Contributor: cerasela The Romanian DPA fined a bedding retailer RON 10,517 (€2,000) for infringing Article 21 GDPR by continuing to send marketing calls and SMS messages after the data subject exercised their right to object. Contents 1 English Summary 1.1 Facts 1.2 Holding 2 Comment 3 Further Resources 4 English Machine Translation of the Decision English Summary Facts Dormeo Home S.R.L. (the controller), received a request from one of its customers (the data subject) exercising their right to object to direct marketing. Despite this objection, the controller continued to send marketing calls and SMS messages to the data subject, who lodged a complaint with the Romanian DPA on this matter. Holding The DPA held that the controller had violated Article 21 GDPR by continuing to contact the data subject for direct marketing purposes after the data subject had exercised their right to object. The DPA considered that the continued transmission of marketing calls and SMS messages constituted unlawful processing of personal data and demonstrated the controller's failure to give effect to the data subject's objection request. In addition, as a corrective measure, the DPA ordered the controller to adopt appropriate technical and organisational measures to ensure GDPR-compliant marketing activities and the effective exercise of data subjects' rights. Finally, the Romanian DPA fined the controller €2,000 (RON 10,517) for a breach of Article 21 GDPR. Comment This decision confirms that, as direct marketing practices become more widespread, controllers must ensure the effective enforcement of data subjects’ rights, in particular the right to object. Also, it is worth pointing out that in this case, the Romanian DPA acted upon a complaint by a data subject, in contrast to many previous decisions where the DPA initiated the investigation. Further Resources Share blogs or news articles here! English Machine Translation of the Decision The decision below is a machine translation of the Romanian original. Please refer to the Romanian original for more details. September 8, 2026 Fine for GDPR Violation The National Supervisory Authority for Personal Data Processing completed, in August 2026, an investigation into the data controller Dormeo Home SRL and found a violation of the provisions of Article 21 of Regulation (EU) 2016/679. As a result, the controller was fined 10,517 lei (equivalent to 2,000 euros). The investigation was initiated following a complaint filed by a data subject alleging a possible violation of the provisions of Regulation (EU) 2016/679. The investigation revealed that, although the data subject had exercised their right to object, the controller failed to take measures to effectively comply with this right regarding telephone calls and text messages for direct marketing purposes. Consequently, the data subject continued to receive unsolicited telephone calls and text messages, which constitutes unlawful processing of personal data, carried out in violation of the provisions of Article 21 of the GDPR regarding the right to object. At the same time, as part of the investigation, the controller was ordered to take appropriate technical and organizational measures to comply with the provisions of the GDPR, with regard to the processing of personal data for marketing purposes and to ensure effective compliance with the rights provided for by the GDPR by the controller and its authorized representatives. Legal and Communications Department A.N.S.P.D.C.P. Retrieved from "https://gdprhub.eu/index.php?title=ANSPDCP_(Romania)_-_Fine_against_Dormeo_Home_S.R.L&oldid=53030" Categories: ANSPDCP (Romania)RomaniaArticle 21 GDPR2026Romanian This page was last edited on 15 September 2026, at 13:09. Content is available under Creative Commons Attribution-NonCommercial-ShareAlike unless otherwise noted. Privacy policy About GDPRhub Disclaimers

Entities