Cafe operator
€1,000
Non-compliance with general data processing principles
Fecha de la decisión
7 de febrero de 2022
Autoridad
Spanish Data Protection Authority (aepd)
ES
Sector
Accomodation and Hospitality
País
ES
Ley
GDPREstado
FINALDescripción
The cafe used CCTV cameras which also captured the public space outside resulting in a violation of the so called principle of data minimisation.
Citas legales
Art. 5 (1)
Problemas e infracciones
Non-compliance with general data processing principles