Company
€3,000
Insufficient legal basis for data processing
Sprendimo priėmimo data
2022 m. lapkričio 29 d.
Institucija
Spanish Data Protection Authority (aepd)
ES
Sektorius
Industry and Commerce
Šalis
HU
Teisė
GDPRStatusas
FINALAprašymas
The Spanish DPA has imposed a fine of EUR 3,000 on a company. The controller had installed a video surveillance system that also recorded the voices of both employees and customers. During its investigation, the DPA found that the controller did not have a valid legal basis for processing the information of the voices as part of the video surveillance. In addition, the DPA found that the controller failed to provide sufficient information about the video surveillance, including information about the processing, the identity of the controller, and the exercise of data subjects' rights.
Teisinės citatos
Art. 6Art. 13
Problemos ir pažeidimai
Insufficient legal basis for data processing