Slovenia’s data protection authority imposed total fines of 16,650 EUR on a company (16,250 EUR) and its responsible individual (400 EUR). The company had stored personal data on a publicly accessible web server that could be accessed via a simple URL without password protection, failing to implement adequate technical and organizational measures to ensure processing security.