Kebab restaurant
€1,800
Insufficient legal basis for data processing
Datum rozhodnutí
1. ledna 2018
Úřad
Austrian Data Protection Authority (dsb)
AT
Sektor
Accomodation and Hospitality
Země
AT
Právo
GDPRStav
FINALPopis
CCTV was unlawfully used. Sufficient information about the video surveillance was missing. In addition, the storage period of 14 days was too long and therefore against the principle of data minimization. Addendum: Fine has been reduced to EUR 1500 by court, see link
Právní citace
Art. 5Art. 13Art. 14
Problémy a porušení
Insufficient legal basis for data processing