# Supermarket: Insufficient legal basis for data processing

- Type: Enforcement
- Source: Data Protection Authority of Bremen
- Date: 2022-01-01
- Original: https://www.enforcementtracker.com/ETid-1729
- Canonical: https://overview.legal/posts/47844
- Topics: Personal Data, Supervisory Authorities, Processing, Processing Agreement

## Summary

The DPA of Bremen has imposed a fine on a supermarket. A store detective had taken a photo of the data subject on the occasion of an alleged theft and transmitted it via the messenger service WhatsApp to the manager, the store manager and two closing staff members, allegedly to enforce house rules but without a sufficient legal basis.

## Full text

The DPA of Bremen has imposed a fine on a supermarket. A store detective had taken a photo of the data subject on the occasion of an alleged theft and transmitted it via the messenger service WhatsApp to the manager, the store manager and two closing staff members, allegedly to enforce house rules but without a sufficient legal basis.

GDPR Articles: Unknown
Industry: Industry and Commerce

---
Generated by overview.legal · https://overview.legal/posts/47844 · 2026-08-22