Entirely Shipping&Trading S.R.L.
- Country
- Romania
- Fine
- 5,000 EUR
- Date
- 2020-01-16
- Sector
- Private Sector
- Articles
- Articles 12 and 13Article 5 alin. (1) a) - c),e), Articles 6, 7 and 9
Breach of the controller's obligation to inform data subjects Breach of the principles governing the processing of personal data Lack of legal basis for the processing of data Failure to comply with the conditions for consent
The Controller has excessively processed the employees' personal data by using the video surveillance cameras installed in the offices and changing rooms. Furthermore, the Controller processed biometric data (fingerprints) of the employees, even though other, less intrusive means to protect the privacy of the data subjects could have been used for the same purpose. The controller was also fined for not providing evidence to inform data subjects about the processing of their personal data. Moreover, the supervisory authority established that the controller had processed the personal data of a former employee without a legal basis by continuing to use these data in electronic correspondence for the purpose of carrying out the company's activities after the termination of the employment contract.