WIND Ελλάς Τηλεπικοινωνίες ΑΕΒΕ

Description

The Hellenic DPA has fined WIND Ελλάς Τηλεπικοινωνίες ΑΕΒΕ EUR 2,000. A customer of the company had sent an email requesting access to the footage recorded by the store's cameras on which they appeared. The data subject never received a response to this request. Only when the authority asked for a response did the controller reply that the data subject's request could not be fulfilled because the recorded material had been deleted. The DPA considered this to be a violation of Art. 15 GDPR.