Kebab restaurant
€1,800
Insufficient legal basis for data processing
Datum odločitve
1. januar 2018
Organ
Austrian Data Protection Authority (dsb)
AT
Sektor
Accomodation and Hospitality
Država
AT
Zakon
GDPRStatus
FINALOpis
CCTV was unlawfully used. Sufficient information about the video surveillance was missing. In addition, the storage period of 14 days was too long and therefore against the principle of data minimization. Addendum: Fine has been reduced to EUR 1500 by court, see link
Pravne navedbe
Art. 5Art. 13Art. 14
Vprašanja in kršitve
Insufficient legal basis for data processing