How do I file a GDPR complaint?

To file a complaint with the Romanian Authority for the Supervision of Personal Data Processing, follow these steps:

1. Access the authority’s website: access the official website of the Romanian Personal Data Processing Supervisory Authority at https://www.dataprotection.ro/.
2. Navigate to the „Complaints” section: from the main menu of the website, select the „GDPR Complaints” option from the menu.
3. Before filing a complaint you should refer to the „Procedural conditions for addressing an admissible complaint” regulated in the Complaints Resolution Procedure approved Decision No. 133/2018. If you have addressed the controller to exercise your rights recognized by the GDPR and you have not received a response within one month from the receipt of your request by the controller (exceptionally the period may be extended by two months, subject to compliance with certain obligations by the controller) or you are dissatisfied with the response received, you may address the National Supervisory Authority for Personal Data Processing with a complaint accompanied by evidence.”
4. Fill in the complaint form: on the „Complaints” page. You must fill in the mandatory fields, such as your name, surname and e-mail address, as well as the details of your complaint.
5. Attach relevant documents: you can attach any documents relevant to your complaint, such as copies of supporting documents or documents received from the company you are complaining about.
6. Submit your complaint: once you have filled in the complaint form and attached the relevant documents, click on the „Submit Complaint” button to submit your complaint to the Romanian Data Protection Authority.

Note: You can also submit a complaint by means of a written request, sent by post or by email to the address of the authority. Contact the authority for further information on how to file a complaint.