Kebab restaurant
€1,800
Insufficient legal basis for data processing
Data della decisione
1 gennaio 2018
Autorità
Austrian Data Protection Authority (dsb)
AT
Settore
Accomodation and Hospitality
Paese
AT
Legge
GDPRStato
FINALDescrizione
CCTV was unlawfully used. Sufficient information about the video surveillance was missing. In addition, the storage period of 14 days was too long and therefore against the principle of data minimization. Addendum: Fine has been reduced to EUR 1500 by court, see link
Citazioni legali
Art. 5Art. 13Art. 14
Problemi e violazioni
Insufficient legal basis for data processing