AZOP (Croatia) - Decision 21-07-2022 (car dealership)

From GDPRhub
AZOP - Decision of 21 July 2022 - unknown car sales and service center
LogoHR.png
Authority: AZOP (Croatia)
Jurisdiction: Croatia
Relevant Law: Article 27(1) GDPR
Type: Investigation
Outcome: Violation Found
Started:
Decided:
Published: 21.07.2022
Fine: 30000 HRK
Parties: n/a
National Case Number/Name: Decision of 21 July 2022 - unknown car sales and service center
European Case Law Identifier: n/a
Appeal: Unknown
Original Language(s): Croatian
Original Source: AZOP (in HR)
Initial Contributor: Presido Croatia

The Croatian DPA fined a car dealership approximately €4,000 for processing of personal data by a video surveillance system without prior notice.

English Summary

Facts

The Croatian DPA carried out an investigation over the processing of personal data by a car dealership in Zagreb (the controller). The controller used a video surveillance system on its premises.

Holding

The Croatian DPA held that the controller violated Article 27(1) of the Croatian GDPR Implementing Act which provides for an obligation to clearly mark premises that are under video surveillance. This notice must be visible at the latest when entering the area in question. The DPA found that the controller did not put up a notice that its premises were under video surveillance and hence violated the Act.

Comment

Share your comments here!

Further Resources

Share blogs or news articles here!

English Machine Translation of the Decision

The decision below is a machine translation of the Croatian original. Please refer to the Croatian original for more details.

Administrative fine of HRK 30,000 for not marking the facility under video surveillance

The Agency for the Protection of Personal Data ex officio, without prior notice, carried out direct supervision over the processing and implementation of the protection of personal data, the collection and processing of personal data carried out by the video surveillance system, and determined that the processing manager - the car sales and service center based in Zagreb was not indicated that certain rooms in it, as well as the external surfaces of the object in question, are under video surveillance, which is against Article 27, Paragraph 1 of the Law on the Implementation of the General Regulation on Data Protection.

In accordance with Article 51, paragraph 1, subparagraph 1 of the Act on the Implementation of the General Regulation on Data Protection, the Agency imposed an administrative fine in the amount of HRK 30,000 for the aforementioned violation.

Precisely the corrective measure in the form of an administrative fine is effective, proportional and deterrent and fully appropriate to the circumstances for both imposed fines, which are paid to the state budget.