# Beauty salon: Insufficient legal basis for data processing

- Type: Enforcement
- Source: Hungarian National Authority for Data Protection and the Freedom of Information (NAIH)
- Date: 2022-01-01
- Original: https://www.enforcementtracker.com/ETid-1812
- Canonical: https://overview.legal/posts/47927
- Topics: Video Surveillance, Controllers, Monitoring, Direct Marketing, Marketing, Processing, Supervisory Authorities, Processing Agreement, Data Controller, Law Enforcement

## Summary

The Hungarian DPA has imposed a fine of EUR 80,700 on a beauty salon. The controller had installed video cameras in all its premises, which permanently recorded customers and employees. During its investigation, the DPA found that the controller did not have the required permission to operate the video surveillance system. In addition, the controller processed the data of the customers for marketing purposes without having a valid legal basis and informing the customers about it.

## Full text

The Hungarian DPA has imposed a fine of EUR 80,700 on a beauty salon. The controller had installed video cameras in all its premises, which permanently recorded customers and employees. During its investigation, the DPA found that the controller did not have the required permission to operate the video surveillance system. In addition, the controller processed the data of the customers for marketing purposes without having a valid legal basis and informing the customers about it.

GDPR Articles: Unknown
Industry: Industry and Commerce

---
Generated by overview.legal · https://overview.legal/posts/47927 · 2026-08-22