# Waxing Palace AS: Insufficient legal basis for data processing

- Type: Enforcement
- Source: Norwegian Supervisory Authority (Datatilsynet)
- Date: 2021-08-12
- Original: https://www.enforcementtracker.com/ETid-809
- Canonical: https://overview.legal/posts/46924
- Topics: Video Surveillance, Controllers, Monitoring, Processing, Supervisory Authorities, Processing Agreement, Data Controller, Supervision

## Summary

The Norwegian DPA (Datatilsynet) has imposed a fine of EUR 9,600 on the waxing salon operator of Waxing Palace AS. The controller had camera surveillance of the controller's reception area. The DPA found that the controller had no legal basis for the camera surveillance, as well as had not provided sufficient information about it. The camera surveillance concerned both employees and customers.

## Full text

The Norwegian DPA (Datatilsynet) has imposed a fine of EUR 9,600 on the waxing salon operator of Waxing Palace AS. The controller had camera surveillance of the controller's reception area. The DPA found that the controller had no legal basis for the camera surveillance, as well as had not provided sufficient information about it. The camera surveillance concerned both employees and customers.

GDPR Articles: Art. 5 GDPR, Art. 6 GDPR, Art. 13 GDPR
Industry: Industry and Commerce

---
Generated by overview.legal · https://overview.legal/posts/46924 · 2026-08-22