# Cafe operator: Non-compliance with general data processing principles

- Type: Enforcement
- Source: Spanish Data Protection Authority (aepd)
- Date: 2022-02-07
- Original: https://www.enforcementtracker.com/ETid-1060
- Canonical: https://overview.legal/posts/47175
- Topics: Video Surveillance, Retention Period, IP Address, Healthcare, Processing, Supervisory Authorities, Law Enforcement

## Summary

The cafe used CCTV cameras which also captured the public space outside resulting in a violation of the so called principle of data minimisation.

## Full text

The cafe used CCTV cameras which also captured the public space outside resulting in a violation of the so called principle of data minimisation.

GDPR Articles: Art. 5 (1) c) GDPR
Industry: Accomodation and Hospitality

---
Generated by overview.legal · https://overview.legal/posts/47175 · 2026-08-22