Kebab restaurant
€1,800
Insufficient legal basis for data processing
決定日
2018年1月1日
権威
Austrian Data Protection Authority (dsb)
AT
セクター
Accomodation and Hospitality
国名
AT
法律
GDPRステータス
FINAL説明
CCTV was unlawfully used. Sufficient information about the video surveillance was missing. In addition, the storage period of 14 days was too long and therefore against the principle of data minimization. Addendum: Fine has been reduced to EUR 1500 by court, see link
法的引用
Art. 5Art. 13Art. 14
問題と違反
Insufficient legal basis for data processing