Norway

Waxing Palace AS

9,600 €

GDPR enforcement action by Norwegian Supervisory Authority (Datatilsynet) on 2021-08-12.

Rank · Sector

#238

of 595 in Industry and Commerce

Rank · Norway

#47

of 52

Rank · All fines

#1,451

of 3,042

Case details

Authority: Norwegian Supervisory Authority (Datatilsynet)
Date: 2021-08-12
Controller / Processor: Waxing Palace AS
Sector: Industry and Commerce
Quoted Articles: Art. 5 GDPR, Art. 6 GDPR, Art. 13 GDPR
Type of violation: Insufficient legal basis for data processing

Summary

The Norwegian DPA (Datatilsynet) has imposed a fine of EUR 9,600 on the waxing salon operator of Waxing Palace AS. The controller had camera surveillance of the controller's reception area. The DPA found that the controller had no legal basis for the camera surveillance, as well as had not provided sufficient information about it. The camera surveillance concerned both employees and customers.

Open original source Links to the regulator's original publication or another source.