SC Spark Car Sharing SRL – €1,000 Fine (Romania, 2023)

€1,000Autoritatea Națională de Supraveghere a Prelucrării Datelor cu Caracter Personal25 October 2023Romania
final
Fine

General GDPR enforcement action

This case relates to broader data protection obligations, not specifically to cookie or consent banner compliance. It is not included in cookie statistics or the Risk Calculator.

SC Spark Car Sharing SRL received a fine of EUR 1,000 for using a person's email address for marketing without their permission. The company also ignored the person's request to delete their data while continuing to send marketing emails. This case highlights the importance of obtaining consent before using personal information.

What happened

SC Spark Car Sharing SRL processed a person's email address for marketing without consent.

Who was affected

The individual whose email address was used for marketing by SC Spark Car Sharing SRL.

What the authority found

The Romanian DPA ruled that the company violated GDPR by not having valid consent for processing personal data.

Why this matters

This ruling emphasizes that companies must respect user consent and requests for data deletion. Small businesses should ensure they have proper consent mechanisms in place to avoid similar issues.

GDPR Articles Cited
Automatically processed
Art. 7(GDPR)
Art. 5(1)(a) GDPR
Art. 6(1) GDPR
View original scraped data
Art. 5(1) a) GDPR
b) GDPR
Art. 6(1) GDPR
Art. 7(GDPR)

Original imported citations before automated processing; the processing history does not establish independent verification.

Source checks

Linked-source text retrieved.

Automated check recorded — 16 March 2026.

Processing notes: articles corrected.

Retrieved text may be a secondary summary or an announcement. These automated statuses do not establish that the original decision was read or that the record received an independent legal review. How we check sources

Full Legal Summary
Detailed

The Romanian DPA has imposed a fine of EUR 1,000 on SC Spark Car Sharing SRL. An individual had filed a complaint with the DPA because the controller had processed their email address for third party marketing purposes without their consent. The DPA also noted that the individual had requested the deletion of all their data. Although the controller informed the customer it would delete their data, the controller continued to send a series of direct marketing messages to their email address.

Related Enforcement Actions (0)

No other enforcement actions found for SC Spark Car Sharing SRL in RO

This is the only recorded action for this entity in this jurisdiction.

Details

Fine Date

25 October 2023

Authority

Autoritatea Națională de Supraveghere a Prelucrării Datelor cu Caracter Personal

Fine Amount

€1,000

About this data

Data: CMS GDPR Enforcement Tracker
Licensed under CC BY-NC-SA 4.0
Automatically normalized and classified

Cite as: Cookie Fines. SC Spark Car Sharing SRL - Romania (2023). Retrieved from cookiefines.eu

Report Inaccuracy

Last updated: