Casa Gracio Operation
€6,000
Non-compliance with general data processing principles
Fecha de la decisión
25 de febrero de 2020
Autoridad
Spanish Data Protection Authority (aepd)
ES
Sector
Accomodation and Hospitality
País
ES
Ley
GDPREstado
FINALDescripción
The company used CCTV cameras in the premises of a hotel which also captured the public roads outside the hotel resulting in a violation of the so called principle of data minimisation.
Citas legales
Art. 5 (1)
Problemas e infracciones
Non-compliance with general data processing principles