# PINTODIS, S.L.: Non-compliance with general data processing principles

- Type: Enforcement
- Source: Spanish Data Protection Authority (aepd)
- Date: 2022-02-07
- Original: https://www.enforcementtracker.com/ETid-1062
- Canonical: https://overview.legal/posts/47177
- Topics: IP Address, Employees, Monitoring, Controllers, Processing Agreement, Processing, Supervisory Authorities, Data Controller, Law Enforcement

## Summary

The Spanish DPA has fined PINTODIS, S.L. EUR 10,000. The controller had installed several video cameras which also covered the food areas and changing rooms of their employees. The Spanish DPA stated that the controller violated the principle of data minimization, as such extensive surveillance was not necessary.

## Full text

The Spanish DPA has fined PINTODIS, S.L. EUR 10,000. The controller had installed several video cameras which also covered the food areas and changing rooms of their employees. The Spanish DPA stated that the controller violated the principle of data minimization, as such extensive surveillance was not necessary.

GDPR Articles: Art. 5 (1) c) GDPR
Industry: Employment

---
Generated by overview.legal · https://overview.legal/posts/47177 · 2026-08-22