Denmar Nacrut SRL – €2,500 Fine (Romania, 2022)

€2,500Autoritatea Națională de Supraveghere a Prelucrării Datelor cu Caracter PersonalJuly 2022Romania
unknown
Fine

General GDPR enforcement action

This case relates to broader data protection obligations, not specifically to cookie or consent banner compliance. It is not included in cookie statistics or the Risk Calculator.

Denmar monitored customers and employees with cameras inside and outside its beauty business, including during cosmetic treatments, without sufficient information or a demonstrated overriding legitimate interest for the intrusive treatment-room monitoring. ANSPDCP imposed RON 4,945.10 / EUR 1,000 under Articles 12-13, plus RON 7,417.65 / EUR 1,500 under Articles 5(1)(a), (b) and (c), 5(2), and 6: combined RON 12,362.75 / EUR 2,500. It ordered proper information, removal of the treatment-room camera, suitable image-management safeguards, prohibition of remote internet access, and access only for incidents relevant to the cameras’ purpose. The native overview rounds the combined figure to whole lei. The official announcement reports investigation completion in 2022-07, without an exact decision day. Its later publication date is retained as a publication fact rather than the action date.

What happened

Denmar monitored customers and employees with cameras inside and outside its beauty business, including during cosmetic treatments, without sufficient information or a demonstrated overriding legitimate interest for the intrusive treatment-room monitoring.

Who was affected

The original announcement identifies Denmar Nacrut SRL as the sanctioned Romanian controller.

What the authority found

ANSPDCP imposed RON 4,945.10 / EUR 1,000 under Articles 12-13, plus RON 7,417.65 / EUR 1,500 under Articles 5(1)(a), (b) and (c), 5(2), and 6: combined RON 12,362.75 / EUR 2,500. It ordered proper information, removal of the treatment-room camera, suitable image-management safeguards, prohibition of remote internet access, and access only for incidents relevant to the cameras’ purpose. The native overview rounds the combined figure to whole lei.

Why this matters

The original assigns EUR 1,000 to transparency and EUR 1,500 to unlawful and excessive surveillance; the secondary summary reverses those component amounts. The original allocation is retained. The instruction to remove the treatment-room camera is distinguished from a blanket assertion that every camera in the business was ordered removed.

GDPR Articles Cited
Automatically processed
Art. 6 GDPR
Art. 12 GDPR
Art. 13 GDPR
Art. 5(1)(a) GDPR
Art. 5(1)(b) GDPR
Art. 5(1)(c) GDPR
Art. 5(2) GDPR
View original scraped data
Article 12 GDPR
Article 13 GDPR
Article 5(1)(a) GDPR
Article 5(1)(b) GDPR
Article 5(1)(c) GDPR
Article 5(2) GDPR
Article 6 GDPR

Original imported citations before automated processing; the processing history does not establish independent verification.

Source checks

Linked-source text retrieved.

Automated check recorded — 18 October 2026.

No issues were reported by that automated check.

Retrieved text may be a secondary summary or an announcement. These automated statuses do not establish that the original decision was read or that the record received an independent legal review. How we check sources

Full Legal Summary
Detailed

Denmar monitored customers and employees with cameras inside and outside its beauty business, including during cosmetic treatments, without sufficient information or a demonstrated overriding legitimate interest for the intrusive treatment-room monitoring. ANSPDCP imposed RON 4,945.10 / EUR 1,000 under Articles 12-13, plus RON 7,417.65 / EUR 1,500 under Articles 5(1)(a), (b) and (c), 5(2), and 6: combined RON 12,362.75 / EUR 2,500. It ordered proper information, removal of the treatment-room camera, suitable image-management safeguards, prohibition of remote internet access, and access only for incidents relevant to the cameras’ purpose. The native overview rounds the combined figure to whole lei. The original assigns EUR 1,000 to transparency and EUR 1,500 to unlawful and excessive surveillance; the secondary summary reverses those component amounts. The original allocation is retained. The instruction to remove the treatment-room camera is distinguished from a blanket assertion that every camera in the business was ordered removed. The official announcement reports investigation completion in 2022-07, without an exact decision day. Its later publication date is retained as a publication fact rather than the action date. Appeal status is not established by the announcement.

Related Enforcement Actions (0)

No other enforcement actions found for Denmar Nacrut SRL in RO

This is the only recorded action for this entity in this jurisdiction.

Details

Fine Date

July 2022

Authority

Autoritatea Națională de Supraveghere a Prelucrării Datelor cu Caracter Personal

Fine Amount

€2,500

12,363 RON

GDPRhub ID

gdprhub-5196

About this data

Data: GDPRhub (noyb.eu)
Licensed under CC BY-NC-SA 4.0
Automatically normalized and classified

Cite as: Cookie Fines. Denmar Nacrut SRL - Romania (2022). Retrieved from cookiefines.eu

Report Inaccuracy

Last updated: