# Kebab restaurant: Insufficient legal basis for data processing

- Type: Enforcement
- Source: Austrian Data Protection Authority (dsb)
- Date: 2018-01-01
- Original: https://www.enforcementtracker.com/ETid-2
- Canonical: https://overview.legal/posts/46117
- Topics: Video Surveillance, Monitoring, IP Address, Processing, Healthcare, Supervisory Authorities

## Summary

CCTV was unlawfully used. Sufficient information about the video surveillance was missing. In addition, the storage period of 14 days was too long and therefore against the principle of data minimization. Addendum: Fine has been reduced to EUR 1500 by court, see link

## Full text

CCTV was unlawfully used. Sufficient information about the video surveillance was missing. In addition, the storage period of 14 days was too long and therefore against the principle of data minimization. Addendum: Fine has been reduced to EUR 1500 by court, see link

GDPR Articles: Art. 5 GDPR, Art. 13 GDPR, Art. 14 GDPR
Industry: Accomodation and Hospitality

---
Generated by overview.legal · https://overview.legal/posts/46117 · 2026-08-22