DAVISER SERVICIOS, S.L.
€20,000
Non-compliance with general data processing principles
Határozat dátuma
2021. november 30.
Hatóság
Spanish Data Protection Authority (aepd)
ES
Szektor
Transportation and Energy
Ország
ES
Törvény
GDPRÁllapot
FINALLeírás
The Spanish DPA (AEPD) has imposed a fine of EUR 20,000 on DAVISER SERVICIOS, S.L.. The company had been processing biometric data (fingerprints) of employees for access to certain rooms, although less intrusive means (such as key cards) could have been used to protect the privacy of the data subjects. The AEPD found that the controller had violated the principle of data minimization.
Jogi hivatkozások
Art. 5 (1)
Kérdések és jogsértések
Non-compliance with general data processing principles