The company, despite being a private security company for video surveillance systems, did not appoint a data protection officer, and it thus violated Art. 37 GDPR.
the company despite being a private security company for video surveillance systems did not appoint a data protection officer and it thus violated   
 company despite   private security company  video surveillance systems   appoint  data protection officer   thus violate   