Kebab restaurant
€1,800
Insufficient legal basis for data processing
Data da decisão
1 de janeiro de 2018
Autoridade
Austrian Data Protection Authority (dsb)
AT
Setor
Accomodation and Hospitality
País
AT
Lei
GDPRStatus
FINALDescrição
CCTV was unlawfully used. Sufficient information about the video surveillance was missing. In addition, the storage period of 14 days was too long and therefore against the principle of data minimization. Addendum: Fine has been reduced to EUR 1500 by court, see link
Citações legais
Art. 5Art. 13Art. 14
Problemas e violações
Insufficient legal basis for data processing