Court case 11R86/25k – Court Ruling (Austria, 2025)
General GDPR enforcement action
This case relates to broader data protection obligations, not specifically to cookie or consent banner compliance. It is not included in cookie statistics or the Risk Calculator.
An Austrian court ruled that a tenant can access personal data held by their landlord. This is important because it reinforces the right of individuals to know what information is being collected about them, especially in disputes.
What happened
A tenant requested access to personal data about their heating and hot-water consumption, which the landlord refused to provide.
Who was affected
The tenant, who was involved in termination proceedings with their landlord, was affected by the refusal to disclose personal data.
What the authority found
The court decided that the landlord had to comply with the tenant's request for access to their personal data, rejecting the landlord's claims that the request was abusive.
Why this matters
This ruling highlights the importance of transparency in landlord-tenant relationships and sets a precedent for individuals seeking access to their personal information. It reminds landlords to be cautious about denying access to data.
GDPR Articles Cited
View original scraped data
Original data from scraper before AI verification against source document.
The data subject was a tenant in an apartment owned by the controller. Termination proceedings were pending between the parties. During those proceedings, the data subject submitted photos and documents suggesting that the controller had been monitoring them. They subsequently submitted an access request, seeking access to personal data processed about them, including among other things, information concerning their heating and hot-water consumption. The controller refused to provide the requested information. The data subject claimed that the refusal had left them with a feeling of powerlessness, stress and uncertainty about the extent to which their private activities had been monitored and their personal data processed. They therefore filed a claim for damages. The controller argued that the data subject’s access request was an abusive exercise of rights because it had been submitted in the context of the termination proceedings. It claimed that their sole intention was to obtain evidence for that dispute. It alleged that the data subject had not shown any interest in this information prior to the court proceedings. The controller also argued that the requested information was protected as its trade secrets. It further requested that the proceedings in this case be stayed until the termination proceedings and the proceedings pending before the Austrian DPA had been finally resolved. The first-instance court rejected the motion for a stay and upheld the data subject’s claims. It found that the access request was not abusive, as the data subject pursued legitimate purposes under Recital 63. It held that the data subject sought to obtain information about the data concerning them and verifying the lawfulness of that processing. It further held that trade secrets could override the right of access only in special circumstances and that the controller’s purpose to avoid giving the data subject an advantage in the termination proceedings was not sufficient. The contro
Outcome
Court Ruling
A ruling by a national court on a data-protection matter.
Related Cases (0)
No other cases found for Court case 11R86/25k in AT
This is the only recorded case for this entity in this jurisdiction.
Details
About this data
Cite as: Cookie Fines. Court case 11R86/25k - Austria (2025). Retrieved from cookiefines.eu
Last updated: