Casa Gracio Operation
€6,000
Non-compliance with general data processing principles
Decision Date
February 25, 2020
Authority
Spanish Data Protection Authority (aepd)
ES
Sector
Accomodation and Hospitality
Country
ES
Law
GDPRStatus
FINALDescription
The company used CCTV cameras in the premises of a hotel which also captured the public roads outside the hotel resulting in a violation of the so called principle of data minimisation.
Legal Citations
Art. 5 (1)
Issues & Violations
Non-compliance with general data processing principles