1/5 Zoltán N. 1 month ago on Google • 2 reviews New
Source:
gdprbirsagog.hu:
"Several
whistleblowers
objected
to
the
fact
that
cameras
are
operated
in
the
premises
of
the
Beauty
Center,
through
which
employees
and
guests
are
eavesdropped.
The
Authority
conducted
an
on-site
inspection,
during
which
32
cameras
were
found.
The
cameras
were
found
to
be
suitable
for
monitoring
the
workers
during
work
and
rest,
and
the
guests
were
also
kept
under
constant
surveillance,
while
they
are
often
seen
in
incomplete
clothing
during
the
treatments.
In
addition
to
images,
the
cameras
also
recorded
sound,
so
the
conversations
of
employees
and
guests
in
the
treatment
rooms
were
also
recorded.
The
Authority
considered
the
legal
basis
of
the
camera
data
management,
the
method
of
consent
and
the
information,
both
on
the
part
of
the
employees
and
the
guests,
to
be
invalid.
No
one
was
informed
about
the
audio
recording,
thereby
seriously
violating
the
provisions
of
the
GDPR
as
well
as
the
private
sector.
They
also
found
a
problem
in
the
management
of
customer
data
and
in
the
recommendation
system
(satisfied
customers
provided
the
contact
information
of
their
acquaintances).
With
the
contact
form
on
the
website
of
the
Beauty
Center,
the
interested
parties
could
give
their
consent
to
inquiries
for
marketing
purposes
(newsletters),
but
these
were
not
mentioned
in
the
data
management
information.
Furthermore,
by
the
fact
that
the
Beauty
Center
managed
the
health
data
of
the
guests
(e.g.:
sick,
having
surgery
on
their
legs,
pregnant)
so
that
in
case
of
illness
their
treatment
date
could
be
validated
later,
they
seriously
violated
the
GDPR
regulation."
In
their
answer,
they
point
out
that
they
have
been
filming
in
accordance
with
the
law
for
1
year...
this
is
really
reassuring...
but
the
very
principle
that
they
eavesdropped
on
their
guests
is
outrageous
and
not
only
illegal
but
also
unethical!
All
of
your
affected
guests
could
sue
you
for
the
previous
completely
illegal
data
collection.
I
recommend
to
their
attention:
Btk.
§
219
Misuse
of
personal
data.
I
think
they
got
away
with
it
a
bit...
3 people found this review helpful 👍