Apartment building owners association
€500
Insufficient legal basis for data processing
Otsuse kuupäev
1. september 2020
Ametiasutus
Romanian National Supervisory Authority for Personal Data Processing (ANSPDCP)
RO
Sektor
Real Estate
Riik
RO
Seadus
GDPRStaatus
FINALKirjeldus
Export of a still image from a video surveillance system and posting of the image on the billboard of the building without sufficient legal basis. In addition, violation of the information obligations under Art. 12, 13 GDPR and violation of Art. 25 and 32 GDPR, because no sufficient information about the CCTV was given and because no sufficient technical and organizational security measures were taken to protect the personal data collected by the video surveillance system.
Õiguslikud viited
Art. 5Art. 6Art. 12Art. 13Art. 25Art. 32
Probleemid ja rikkumised
Insufficient legal basis for data processing