Greece

Gas station

3,000 €

GDPR enforcement action by Hellenic Data Protection Authority (HDPA) on 2022-09-22.

Rank · Sector

#377

of 597 in Industry and Commerce

Rank · Greece

#79

of 93

Rank · All fines

#2,070

of 3,050

Case details

Authority: Hellenic Data Protection Authority (HDPA)
Date: 2022-09-22
Controller / Processor: Gas station
Sector: Industry and Commerce
Quoted Articles: Art. 12 GDPR, Art. 14 GDPR
Type of violation: Insufficient fulfilment of data subjects rights

Summary

The Hellenic DPA has imposed a fine of EUR 3,000 on a gas station operator. A person had filed a complaint with the DPA due to the controller's failure to grant them access to images of their minor child recorded by the video surveillance system in the gas station. The DPA considered this to be a violation of Art. 12 GDPR. In addition, the operator had shared the images from the video surveillance system with the police in the course of a police investigation without informing the parent. The DPA found that failure to inform the parent constituted a violation of Art. 14 GDPR.

Open original source Links to the regulator's original publication or another source.