The Slovenian supervisory authority imposed a total fine of 5,100 EUR on a company (4,800 EUR) and its responsible person (300 EUR). The company operated a website where users could enter personal data into a form. In doing so, the data controller failed to inform the data subjects in an appropriate manner about the data processing in accordance with Article 13 of the GDPR.