Court case Ro 2022/04/0026 – Court Ruling (Austria, 2024)
General GDPR enforcement action
This case relates to broader data protection obligations, not specifically to cookie or consent banner compliance. It is not included in cookie statistics or the Risk Calculator.
Austrian hotel and restaurant operators lost their appeal against a platform that posted reviews about their business without consent. The court ruled that the platform's use of their personal data was justified under the right to freedom of expression. This case highlights the balance between personal privacy and public opinion in online reviews.
What happened
The court dismissed an appeal from hotel and restaurant operators who wanted their data erased from a review platform.
Who was affected
The operators of a hotel and restaurant whose business was reviewed online without their consent.
What the authority found
The court found that the platform had a legitimate interest in processing the operators' data for freedom of expression purposes.
Why this matters
This ruling sets a precedent for how online reviews can impact business owners' privacy. Operators should be aware of how their businesses are represented online and consider monitoring reviews.
GDPR Articles Cited
View original scraped data
Original data from scraper before AI verification against source document.
The data subjects, joint operators of a hotel and restaurant business, ran their establishment through a family business. The controller operates an online travel platform accessible in Austria, on which registered users can post reviews and experience reports about listed establishments, in addition to general information. The data subjects' business was listed on the platform without their consent and was reviewed by users a few times per month, in comments that identified the data subjects by name, including both positive and negative reviews. On 27 June 2019, the data subjects requested that the controller erase all their personal data from the platform. The controller did not comply. On 28 August 2019, the data subjects lodged a complaint with the Austrian DPA, alleging unlawful processing and a violation of their right to erasure under Article 17(1)(d) GDPR. The DPA rejected the complaint on 18 September 2020, relying on Article 6(1)(f) GDPR (legitimate interests) as the legal basis for the processing. The data subjects appealed to the Federal Administrative Court (BVwG), which held an oral hearing and dismissed the appeal on 13 May 2022. The BVwG found that the platform's processing served a legitimate interest in freedom of expression and information that the reviews concerned the data subjects' social andprofessional sphere rather than their private sphere, that it was reasonable to expect the data subjects to monitor the platform for unjustified criticism and that the controller had taken adequate measures against abusive reviews. The BVwG declared an appeal on points of law (Revision) admissible, citing the absence of Supreme Administrative Court case-law on the principles governing the balancing of interests for review platforms under Article 6(1)(f) GDPR. The data subjects appealed to the Supreme Administrative Court. The court dismissed the appeal as unfounded, addressing each contested element of the three-part test under Article 6(1)(f) GDPR (legit
Outcome
Court Ruling
A ruling by a national court on a data-protection matter.
Related Cases (0)
No other cases found for Court case Ro 2022/04/0026 in AT
This is the only recorded case for this entity in this jurisdiction.
Details
About this data
Cite as: Cookie Fines. Court case Ro 2022/04/0026 - Austria (2024). Retrieved from cookiefines.eu
Last updated: