Spain

Grupo Carolizan

3,000 €

GDPR enforcement action by Spanish Data Protection Authority (aepd) on 2020-09-17.

Rank · Sector

#357

of 597 in Industry and Commerce

Rank · Spain

#600

of 1,075

Rank · All fines

#2,014

of 3,050

Case details

Authority: Spanish Data Protection Authority (aepd)
Date: 2020-09-17
Controller / Processor: Grupo Carolizan
Sector: Industry and Commerce
Quoted Articles: Art. 5 GDPR
Type of violation: Non-compliance with general data processing principles

Summary

Operation of CCTV camera systems in an arcade area in front of a building, i.e. also covering public space. This violated the principles of data minimization, as the surveillance cameras could have been operated in a way that would not have affected the public space.

Open original source Links to the regulator's original publication or another source.