Kebab restaurant
€1,800
Insufficient legal basis for data processing
Date de décision
1 janvier 2018
Autorité
Austrian Data Protection Authority (dsb)
AT
Secteur
Accomodation and Hospitality
Pays
AT
Droit
GDPRStatut
FINALDescription
CCTV was unlawfully used. Sufficient information about the video surveillance was missing. In addition, the storage period of 14 days was too long and therefore against the principle of data minimization. Addendum: Fine has been reduced to EUR 1500 by court, see link
Citations légales
Art. 5Art. 13Art. 14
Questions et violations
Insufficient legal basis for data processing