# Restaurant (SANTI 3000, S.L.): Insufficient legal basis for data processing

- Type: Enforcement
- Source: Spanish Data Protection Authority (aepd)
- Date: 2025-12-30
- Original: https://www.enforcementtracker.com/ETid-81
- Canonical: https://overview.legal/posts/49098
- Topics: IP Address, Employees, Processing, Supervisory Authorities

## Summary

A restaurant wanted to impose disciplinary sanctions on an employee using images from a mobile phone video which was recorded by another employee in the restaurant for evidence purposes. The initial fine of EUR 12.000 was reduced to EUR 9.600.

## Full text

A restaurant wanted to impose disciplinary sanctions on an employee using images from a mobile phone video which was recorded by another employee in the restaurant for evidence purposes. The initial fine of EUR 12.000 was reduced to EUR 9.600.

GDPR Articles: Art. 5 (1) a) GDPR, Art. 6 GDPR
Industry: Employment

---
Generated by overview.legal · https://overview.legal/posts/49098 · 2026-08-22