Huppuís ehf

€34,000

Non-compliance with general data processing principles

วันที่ตัดสินใจ

15 มิถุนายน 2564

อำนาจ

Icelandic data protection authority ('Persónuvernd')

IS

ภาคส่วน

Employment

ประเทศ

IS

กฎหมาย

GDPR

สถานะ

FINAL

คำอธิบาย

The Icelandic DPA (Persónuvernd) has imposed a fine of EUR 34,000 on Huppuís ehf. A former employee filed a complaint against the controller with the DPA. The reason for this was the camera surveillance installed by the controller. During their shifts, the controller's employees wore clothing provided by the controller.However, the designated changing room of the store was a storage room in which large quantities of cleaning materials were stored. Due to a lack of sufficient space in this room, the employees (mostly minors) had to change in the general employee area, which was covered by a video camera. The controller stated that they had installed the video camera for security purposes. The DPA concluded that the controller had a legitimate interest in the video surveillance, but that the interests of the mostly underage employees must also be taken in account. The controller should have tried to implement less restrictive measures. In addition, the DPA underlined that the information on video surveillance was inadequate in both the employee and customer service areas. In determining the amount of the fine, the fact that a large number of the data subjects were minors was taken into account as an aggravating factor.

การอ้างอิงทางกฎหมาย

Art. 5 (1)Art. 6 (1)Art. 12 (1)Art. 13 (1)

ปัญหาและการละเมิด

Non-compliance with general data processing principles

อัปเดตข้อมูลเกี่ยวกับการบังคับใช้ความเป็นส่วนตัว

เราเคารพความเป็นส่วนตัวของคุณ อีเมลเพียงเดือนละครั้ง ไม่มีสแปม ยกเลิกการรับข่าวสารได้ตลอดเวลา