Restaurant owner

€2,400

Non-compliance with general data processing principles

Fecha de la decisión

25 de marzo de 2024

Autoridad

Spanish Data Protection Authority (aepd)

ES

Sector

Accomodation and Hospitality

País

ES

Ley

GDPR

Estado

FINAL

Descripción

The Spanish DPA has imposed a fine on a private individual. The data controller had installed a video surveillance camera in their restaurant, which also captured the guest area. The DPA found that such extensive recording of the guests was not necessary and considered this to be a violation of the principle of data minimization. The original fine of EUR 4,000 was reduced to EUR 2,400 due to the voluntary payment and admission of responsibility.

Citas legales

Art. 5 (1)

Problemas e infracciones

Non-compliance with general data processing principles

Manténgase al día sobre la aplicación de las normas de protección de la intimidad

Respetamos su intimidad. Un correo electrónico al mes, sin spam, darse de baja en cualquier momento.