Kindred Group Limited – Court Ruling (Netherlands, 2026)

Court Ruling
DPA RbDenHaag2 September 2026Netherlands
final
Court Ruling

General GDPR enforcement action

This case relates to broader data protection obligations, not specifically to cookie or consent banner compliance. It is not included in cookie statistics or the Risk Calculator.

The District Court of The Hague ruled that Kindred Group Limited must provide requested personal data to individuals who used their gambling services. This is significant because it reinforces the rights of users to access their personal information.

What happened

Kindred Group Limited did not provide personal data requested by users regarding their gambling activities.

Who was affected

Individuals who participated in online gambling through Kindred Group Limited's services.

What the authority found

The court decided that Kindred Group Limited failed to comply with users' requests for access to their personal data under GDPR.

Why this matters

This ruling emphasizes the importance of user rights regarding data access. Companies in similar sectors should ensure they have processes in place to fulfill such requests.

GDPR Articles Cited
Automatically processed
Art. 15(GDPR)
Art. 79(GDPR)
Art. 12(5) GDPR
Art. 23(1) GDPR
Art. 80(1) GDPR
View original scraped data
Art. 12(5) GDPR
Art. 15(GDPR)
Art. 23(1) GDPR
Art. 79(GDPR)
Art. 80(1) GDPR

Original imported citations before automated processing; the processing history does not establish independent verification.

National Law Articles
AI-identified
Maltese Subsidiary Legislation 586.09
Decision AuthorityRb. Den Haag

Source checks

Secondary-source text retrieved.

Automated check recorded — 16 September 2026.

Processing notes: articles corrected, national law identified.

Retrieved text may be a secondary summary or an announcement. These automated statuses do not establish that the original decision was read or that the record received an independent legal review. How we check sources

Full Legal Summary
Detailed

The District Court of The Hague (the Court) considered an action brought by 51 individuals who had participated in online gambling offered through the website Unibet before 1 October 2021. At that time, the relevant websites were operated by Risepoint Limited, formerly Trannel International Ltd (the controller). Kindred Group Limited had previously been the parent company of Risepoint. The data subjects had authorised Dynamiet Nederland B.V., a commercial legal services provider, to act on their behalf in matters relating to gambling losses (hereinafter, Dynamiet). The authorisation expressly included submitting access requests under Article 15 GDPR concerning account and transaction data held by online gambling providers. Between December 2024 and January 2025, the data subjects, acting through Dynamiet, submitted access requests to the controller under Article 15 GDPR. They requested, among other things, their personal data, account and contractual information, financial transactions and detailed information concerning their gambling activity. The controller did not provide the requested data. The data subjects subsequently brought proceedings seeking an order requiring the controller to provide the requested information. They also requested a penalty payment in the event of non-compliance. The controller argued, among other things, that the claims should not be examined because of Maltese legislation restricting certain GDPR rights and because the requirements of Article 80(1) GDPR were not fulfilled. The Court held that Maltese Subsidiary Legislation 586.09 did not automatically justify refusing an Article 15 GDPR access request. Although Article 23 GDPR allows certain restrictions on data subject rights, such restrictions must still be necessary and proportionate. The controller had also failed to demonstrate that the requests were abusive or excessive. However, the Court did not assess whether Article 15 GDPR had been infringed. It found that Dynamiet was ef

Outcome

Court Ruling

A ruling by a national court on a data-protection matter.

Related Cases (0)

No other cases found for Kindred Group Limited in NL

This is the only recorded case for this entity in this jurisdiction.

Details

Ruling Date

2 September 2026

Authority

DPA RbDenHaag

About this data

Data: GDPRhub (noyb.eu)
Licensed under CC BY-NC-SA 4.0
Automatically normalized and classified

Cite as: Cookie Fines. Kindred Group Limited - Netherlands (2026). Retrieved from cookiefines.eu

Report Inaccuracy

Last updated: