Kebab restaurant
€1,800
Insufficient legal basis for data processing
決定日期
2018年1月1日
權限
Austrian Data Protection Authority (dsb)
AT
部門
Accomodation and Hospitality
國家
AT
法律
GDPR狀態
FINAL說明
CCTV was unlawfully used. Sufficient information about the video surveillance was missing. In addition, the storage period of 14 days was too long and therefore against the principle of data minimization. Addendum: Fine has been reduced to EUR 1500 by court, see link
法律引文
Art. 5Art. 13Art. 14
問題與違規
Insufficient legal basis for data processing