Kebab restaurant
€1,800
Insufficient legal basis for data processing
تاريخ القرار
1 يناير 2018
الهيئة
Austrian Data Protection Authority (dsb)
AT
القطاع
Accomodation and Hospitality
البلد
AT
القانون
GDPRالحالة
FINALالوصف
CCTV was unlawfully used. Sufficient information about the video surveillance was missing. In addition, the storage period of 14 days was too long and therefore against the principle of data minimization. Addendum: Fine has been reduced to EUR 1500 by court, see link
الاستشهادات القانونية
Art. 5Art. 13Art. 14
القضايا والانتهاكات
Insufficient legal basis for data processing