The taxi company failed to conduct a proper data protection risk assessment of the processed data gathered from a camera surveillance system which recorded video and audio in the company’s taxis, and the surveillance data of security cameras, as well as location data, and last but not least, profiling and automated decision making that was part of the loyalty system. Moreover, the audio data that the company processed came into contradiction with the GDPR principle of data minimization.
the taxi company failed to conduct a proper data protection risk assessment of the processed data gathered from a camera surveillance system which recorded video and audio in the company’s taxis and the surveillance data of security cameras as well as location data and last but not least profiling and automated decision making that was part of the loyalty system moreover the audio data that the company processed came into contradiction with the  principle of data minimization
 taxi company fail  conduct  proper data protection risk assessment   process data gather   camera surveillance system  record video  audio   company’ taxis   surveillance data  security cameras  well  location data  last   least profile  automate decision make   part   loyalty system moreover  audio data   company process come  contradiction    principle  data minimization