Apartment building owners association

€500

Insufficient legal basis for data processing

Decision Date

1 de setembro de 2020

Authority

Romanian National Supervisory Authority for Personal Data Processing (ANSPDCP)

RO

Sector

Real Estate

Country

RO

Law

GDPR

Status

FINAL

Description

Export of a still image from a video surveillance system and posting of the image on the billboard of the building without sufficient legal basis. In addition, violation of the information obligations under Art. 12, 13 GDPR and violation of Art. 25 and 32 GDPR, because no sufficient information about the CCTV was given and because no sufficient technical and organizational security measures were taken to protect the personal data collected by the video surveillance system.

Legal Citations

Art. 5Art. 6Art. 12Art. 13Art. 25Art. 32

Issues & Violations

Insufficient legal basis for data processing

Stay Updated on Privacy Enforcement

We respect your privacy. One email per month, no spam, unsubscribe anytime.