Kebab restaurant
€1,800
Insufficient legal basis for data processing
Decision Date
1 de janeiro de 2018
Authority
Austrian Data Protection Authority (dsb)
AT
Sector
Accomodation and Hospitality
Country
AT
Law
GDPRStatus
FINALDescription
CCTV was unlawfully used. Sufficient information about the video surveillance was missing. In addition, the storage period of 14 days was too long and therefore against the principle of data minimization. Addendum: Fine has been reduced to EUR 1500 by court, see link
Legal Citations
Art. 5Art. 13Art. 14
Issues & Violations
Insufficient legal basis for data processing