Waxing Palace AS
€9,600
Insufficient legal basis for data processing
Decision Date
August 12, 2021
Authority
Norwegian Supervisory Authority (Datatilsynet)
NO
Sector
Industry and Commerce
Country
NO
Law
GDPRStatus
FINALDescription
The Norwegian DPA (Datatilsynet) has imposed a fine of EUR 9,600 on the waxing salon operator of Waxing Palace AS. The controller had camera surveillance of the controller's reception area. The DPA found that the controller had no legal basis for the camera surveillance, as well as had not provided sufficient information about it. The camera surveillance concerned both employees and customers.
Legal Citations
Art. 5Art. 6Art. 13
Issues & Violations
Insufficient legal basis for data processing