The National Supervisory Authority for the Processing of Personal Data completed in October 2024 an investigation at the operator Blackcab Systems  SRL and found a violation of the provisions of art. 12 para. (3) and art. 15 para. (1) and (3) related to the provisions of art. 83 para. (5) lit. b) from Regulation (EU) 2016/679.

As such, the operator was penalized with a fine of 4,975.9 lei (the equivalent of 1,000 EURO).

The investigation was started as a result of a complaint submitted by a natural person who reported a possible violation of Regulation (EU) 2016/679.

The data subject, a client of the operator, addressed to him with a request regarding the right of access and requested a copy of his personal data.

During the investigation, it was found that the operator Blackcab Systems SRL did not prove that it responded to the petitioner’s request, thus violating the provisions of art. 12 para. (3) and art. 15 para. (1) and (3) of Regulation (EU) 2016/679.

Also, pursuant to art. 58 para. (2) lit. c) from Regulation (EU) 679/2016, the corrective measure consisting in taking the necessary measures to respect the rights of the data subjects provided for by the Regulation and the communication of a response to the request of the data subject, through which he exercised his right of access, including the transmission copy of his data, according to art. 15 para. (1) and (3) of Regulation (EU) 2016/679.

https://www.dataprotection.ro/index.jsp?page=Comunicat_Presa_04_11_2024&lang=ro