Enforcement
EN Kebab restaurant: Insufficient legal basis for data processing
€1,800 fine - Austrian Data Protection Authority (dsb)
Content
CCTV was unlawfully used. Sufficient information about the video surveillance was missing. In addition, the storage period of 14 days was too long and therefore against the principle of data minimization. Addendum: Fine has been reduced to EUR 1500 by court, see link
GDPR Articles: Art. 5 GDPR, Art. 13 GDPR, Art. 14 GDPR
Industry: Accomodation and Hospitality