The regulator found several privacy violations, including shortcomings in information provided to users about the processing of their personal data.