Kebab restaurant
€1,800
Insufficient legal basis for data processing
Fecha de la decisión
1 de enero de 2018
Autoridad
Austrian Data Protection Authority (dsb)
AT
Sector
Accomodation and Hospitality
País
AT
Ley
GDPREstado
FINALDescripción
CCTV was unlawfully used. Sufficient information about the video surveillance was missing. In addition, the storage period of 14 days was too long and therefore against the principle of data minimization. Addendum: Fine has been reduced to EUR 1500 by court, see link
Citas legales
Art. 5Art. 13Art. 14
Problemas e infracciones
Insufficient legal basis for data processing