Austria

Kebab restaurant

1,800 €

GDPR enforcement action by Austrian Data Protection Authority (dsb) on 2018.

Rank · Sector

#65

of 100 in Accomodation and Hospitality

Rank · Austria

#27

of 38

Rank · All fines

#2,431

of 3,042

Case details

Authority: Austrian Data Protection Authority (dsb)
Date: 2018
Controller / Processor: Kebab restaurant
Sector: Accomodation and Hospitality
Quoted Articles: Art. 5 GDPR, Art. 13 GDPR, Art. 14 GDPR
Type of violation: Insufficient legal basis for data processing

Summary

CCTV was unlawfully used. Sufficient information about the video surveillance was missing. In addition, the storage period of 14 days was too long and therefore against the principle of data minimization. Addendum: Fine has been reduced to EUR 1500 by court, see https://www.dataprotect.at/2020-videoüberwachung-strafe/

Open original source Links to the regulator's original publication or another source.