NTH Haustechnik GmbH – CJEU Judgment (European Union, 2026)
CJEU judgment — not a DPA enforcement action
This is a Court of Justice ruling, not an enforcement action by a data protection authority. It is not included in cookie statistics or the Risk Calculator.
The Court of Justice ruled on a case involving a former employee of NTH Haustechnik who accessed company data unlawfully. The company discovered the employee's actions through questionable means, leading to legal questions about data processing in employment disputes. This ruling could affect how companies handle similar situations in the future.
What happened
NTH Haustechnik brought a case against a former employee for unlawfully accessing company data and selling equipment on eBay.
Who was affected
The former employee of NTH Haustechnik who accessed company data after leaving the job.
What the authority found
The Court determined that the company unlawfully accessed the employee's private data, raising questions about the legality of such actions in employment-related cases.
Why this matters
This ruling emphasizes the importance of lawful data access and processing in employment disputes. Companies should be cautious about how they handle employee data to avoid legal complications.
GDPR Articles Cited
View original scraped data
Original data from scraper before AI verification against source document.
National Law Articles
A data subject was an employee of a heating and air conditioning business. The data subject ceased working at the company, however, was still able to access the company’s premises and computers through their managing director for several years. The company brought a case against the data subject, on the grounds that the data subject had sold equipment belonging to the company through eBay. The company sought damages based on this. The German Landesarbeitsgericht Niedersachsen (Higher Labour Court, Lower Saxony) stayed proceedings and requested a preliminary ruling from the CJEU. The data protection issue in this case is that the company became aware of the transactions by accessing the data subject’s private eBay account (how the company received the ID and password is disputed). According to the Court, the company collected and stored the data unlawfully. The Court also considered that it carried out data processing in assessing the evidence during the proceedings, and asked for clarification regarding national legislation for judicial data processing activities and their legal bases. The Court referred the following questions: # Do national provisions involving an independent judicial processing activity under public interest (Article 6(1)(e) GDPR) fulfil the certainty requirements under the EU Charter of Fundamental Rights and the GDPR if it interferes with the fundamental rights of a (third) party? # Data processing by a court: ## Can a court rely solely on Article 17(3)(e) GDPR to process personal data? ## If yes: ### Does this still apply if the initial data collection is unlawful? ### Does the principle of fairness (Article 5(1)(a) GDPR) restrict the applicability of Article 17(3)(e) GDPR? ### Must Article 17(3)(e) GDPR be interpreted as an exception to the prohibition of using unlawfully obtained data for judicial purposes? # Regardless of the questions above: ## Must the court carry out a comprehensive proportionality test in accordance with the princ
Outcome
CJEU Judgment
A judgment by the Court of Justice of the European Union, typically on a preliminary reference from a national court.
Related Cases (1)
Other cases involving NTH Haustechnik GmbH in EU
Details
About this data
Cite as: Cookie Fines. NTH Haustechnik GmbH - European Union (2026). Retrieved from cookiefines.eu
Last updated: