Restaurant owner

€2,400

Non-compliance with general data processing principles

Dato for beslutning

25. mars 2024

Myndighet

Spanish Data Protection Authority (aepd)

ES

Sektor

Accomodation and Hospitality

Land

ES

Lov og rett

GDPR

Status

FINAL

Beskrivelse

The Spanish DPA has imposed a fine on a private individual. The data controller had installed a video surveillance camera in their restaurant, which also captured the guest area. The DPA found that such extensive recording of the guests was not necessary and considered this to be a violation of the principle of data minimization. The original fine of EUR 4,000 was reduced to EUR 2,400 due to the voluntary payment and admission of responsibility.

Juridiske henvisninger

Art. 5 (1)

Problemer og overtredelser

Non-compliance with general data processing principles

Hold deg oppdatert om håndheving av personvern

Vi respekterer personvernet ditt. Én e-post per måned, ingen spam, avmelding når som helst.