Grupo Carolizan
€3,000
Non-compliance with general data processing principles
Decision Date
September 17, 2020
Authority
Spanish Data Protection Authority (aepd)
ES
Sector
Industry and Commerce
Country
ES
Law
GDPRStatus
FINALDescription
Operation of CCTV camera systems in an arcade area in front of a building, i.e. also covering public space. This violated the principles of data minimization, as the surveillance cameras could have been operated in a way that would not have affected the public space.
Legal Citations
Art. 5
Issues & Violations
Non-compliance with general data processing principles