Clemens Bar ApS – Complaint Upheld (Denmark, 2024)

Complaint Upheld
Datatilsynet (Norway)24 June 2024Denmark
final
Complaint Upheld

General GDPR enforcement action

This case relates to broader data protection obligations, not specifically to cookie or consent banner compliance. It is not included in cookie statistics or the Risk Calculator.

Clemens Bar ApS denied a request for CCTV footage from a visitor, claiming it was necessary for crime prevention. The authority upheld the complaint but did not impose a fine, emphasizing the need to balance privacy rights with public safety. This case highlights the complexities of access requests and the importance of justifying refusals.

What happened

Clemens Bar ApS refused a visitor's request to access CCTV footage, citing public safety concerns.

Who was affected

A visitor who requested access to CCTV footage from Clemens Bar ApS.

What the authority found

The authority upheld the complaint but noted that the bar's refusal was based on legitimate public interest concerns.

Why this matters

This ruling illustrates the challenges businesses face when balancing privacy rights with public safety. Companies should carefully consider how they handle access requests.

GDPR Articles Cited
Automatically processed
Art. 15(GDPR)
View original scraped data
Art. 15(GDPR)

Original imported citations before automated processing; the processing history does not establish independent verification.

National Law Articles
AI-identified
Article 22 databeskyttelseslovens

Source checks

Secondary-source text retrieved.

Automated check recorded — 10 April 2026.

Processing notes: articles corrected, national law identified, authority corrected.

Retrieved text may be a secondary summary or an announcement. These automated statuses do not establish that the original decision was read or that the record received an independent legal review. How we check sources

Full Legal Summary
Detailed

A data subject filed an access request under Article 15 GDPR with Clemens Bar ApS (a controller). The data subject wished to access CCTV footage. The controller refused the request, claiming the CCTV was installed in response to an order from [https://www.kk.dk/politik/lokaludvalg-saerlige-udvalg-raad-og-naevn/naevn/bevillingsnaevnet the Licensing Board] (Bevillingsnævnet). The Licensing Board is a body responsible for granting alcohol license to bars. As explained by the controller, the CCTV served the purpose of crime prevention and the recordings were used by Police to criminal activity. The access to the CCTV footage would then disclose the location of CCTV and jeopardise its purpose. Thus, the controller called upon Article 22(2)(3)(4) of [https://www.datatilsynet.dk/media/7753/danish-data-protection-act.pdf Data protection act], allowing for restricting access request, in particular, when the data subject interest was overridden by public interest, namely public security and crime prevention. The data subject filed a complaint with the Danish DPA (Datatilsynet). After receiving the complaint, forwarded by the DPA, the controller again refused to provide access to the data. Hence, the data subject filed another complaint against the controller. During the proceedings, the controller sustained their reasoning. Additionally, the controller also mentioned that the answer to access request was not technically feasible, since the controller was unable to anonymise the image of other data subjects (blurring), without blurring the image of the data subject too. Afterwards, the controller stated a human error caused deletion of the data. The data subject claimed the access request was related to potential violation of Article 244 of the Criminal Code. The DPA upheld the complaint. The DPA expressed “serious criticism” over deletion of data subject’s data. Once the controller deleted the data, the data subject lost possibility to lodge an effective complaint aga

Outcome

Complaint Upheld

A data subject complaint that was upheld by the DPA.

Related Enforcement Actions (0)

No other enforcement actions found for Clemens Bar ApS in DK

This is the only recorded action for this entity in this jurisdiction.

Details

Decision Date

24 June 2024

Authority

Datatilsynet (Norway)

GDPRhub ID

gdprhub-8529

About this data

Data: GDPRhub (noyb.eu)
Licensed under CC BY-NC-SA 4.0
Automatically normalized and classified

Cite as: Cookie Fines. Clemens Bar ApS - Denmark (2024). Retrieved from cookiefines.eu

Report Inaccuracy

Last updated: