Österreichische Post AG – Court Ruling (Austria, 2019)

Court Ruling
DPA LGFeldkirch7 August 2019Austria
final
Court Ruling

General GDPR enforcement action

This case relates to broader data protection obligations, not specifically to cookie or consent banner compliance. It is not included in cookie statistics or the Risk Calculator.

Österreichische Post AG sold data predicting people's political affiliations without proper consent. A privacy lawyer challenged this, claiming the postal service violated data protection rules. The court agreed that the data was sensitive and awarded the lawyer €800 for emotional damages.

What happened

Österreichische Post AG sold data predicting political affiliations without valid consent.

Who was affected

A privacy lawyer, Dr. Christian Wirthensohn, whose political affiliation was predicted and sold.

What the authority found

The court ruled that the data sold by the postal service fell under special categories of data, violating GDPR's requirements.

Why this matters

This case highlights that companies must handle sensitive data carefully and cannot rely solely on national laws if they conflict with GDPR. Businesses should ensure they have valid consent for processing sensitive personal information.

GDPR Articles Cited

AI-verified

Art. 82(GDPR)
Art. 9(1) GDPR
View original scraped data
Art. 9(1) GDPR
Art. 82(GDPR)

Original data from scraper before AI verification against source document.

Decision AuthorityLG Feldkirch
Source verified 19 March 2026
national law identified
Full Legal Summary
Detailed

The Austrian postal service ("Österreichische Post AG", a private stock company, of which 52,9% is owned by the Republic of Austria) also sells data for direct marketing purposes ("list brokerage"). These lists include names and addresses and other factors that are largely generated using other public information and predictive models. The postal service also sold data that included a likeliness of the political affiliation (similar to: 45% social-democratic, 20% conservative, 5% Green Party). This was mainly intended for postal mailings by said political parties. The data was generated using public information about voting behavior in each voting district in Austria, aga and alike and was sold publicly. The postal service mainly relied on § 151 of the Austrian Business Code of 1994 ("Gewerbeordnung 1994", GewO) that regulates address brokers. The national law does not differentiate between different types of data, but limits the use solely to marketing purposes. The postal service took the view that predictions about the political affiliation of a data subject does not itself constitute "special categories of data" under Article 9 GDPR. A data subject (Dr. Christian Wirthensohn, a privacy lawyer) made an access request, receiving a copy of his alleged political affiliations (a percentage per political party). He sued the postal service for € 2.500 in emotional damages for a number of alleged violations (illegal processing of data, lack of data minimization, delayed access to data, lack of information). What is the relationship between national laws (like § 151 GewO) and GDPR? Is a prediction of a political affiliation a "special category of data" under Article 9(1) GDPR? How much are the damages under Article 82 GDPR in this case? The Court found a violation of the GDPR, as the data falls under Article 9 GDPR and awarded € 800 in emotional damages. The Austrian Business Code cannot override Article 9 GDPR. There are no rules on the calculation of damages in G

Outcome

Court Ruling

A ruling by a national court on a data-protection matter.

Details

Ruling Date

7 August 2019

Authority

DPA LGFeldkirch

About this data

Data: GDPRhub (noyb.eu)
Licensed under CC BY-NC-SA 4.0
AI-verified and classified

Cite as: Cookie Fines. Österreichische Post AG - Austria (2019). Retrieved from cookiefines.eu

Report Inaccuracy

Last updated: