Cafe operator
€1,000
Non-compliance with general data processing principles
Decision Date
February 7, 2022
Authority
Spanish Data Protection Authority (aepd)
ES
Sector
Accomodation and Hospitality
Country
ES
Law
GDPRStatus
FINALDescription
The cafe used CCTV cameras which also captured the public space outside resulting in a violation of the so called principle of data minimisation.
Legal Citations
Art. 5 (1)
Issues & Violations
Non-compliance with general data processing principles