Company – €16,600 Fine (Germany, 2023)
General GDPR enforcement action
This case relates to broader data protection obligations, not specifically to cookie or consent banner compliance. It is not included in cookie statistics or the Risk Calculator.
A real estate company in Germany was fined EUR 16,600 for not having a joint controllership agreement and for collecting data without a legal basis. They also failed to delete data when requested. This case shows the importance of having proper agreements and respecting data deletion requests.
What happened
A real estate company collected personal data without a legal basis and failed to establish a joint controllership agreement.
Who was affected
Individuals whose personal data was collected and not deleted upon request by the real estate company.
What the authority found
The DPA found the company violated GDPR by not having a joint controllership agreement and by failing to comply with data collection and deletion requirements.
Why this matters
This case serves as a reminder for companies to establish clear data processing agreements and to comply with data deletion requests. Proper legal frameworks are essential to avoid fines and ensure data protection compliance.
View original scraped data
Original imported citations before automated processing; the processing history does not establish independent verification.
Source checks
Linked-source text retrieved.
Automated check recorded — 13 March 2026.
Processing notes: authority corrected.
Retrieved text may be a secondary summary or an announcement. These automated statuses do not establish that the original decision was read or that the record received an independent legal review. How we check sources
The DPA of Niedersachsen has imposed a fine of EUR 16,600 on a company in the real estate industry for failing to conclude a joint controllership agreement. In addition, the controller had collected personal data without a legal basis and had not complied with a deletion request in good time.
Related Enforcement Actions (20)
Other enforcement actions involving Company in DE
Fine
€17K
Details
Fine Date
1 January 2023
Authority
Bundesbeauftragter für den Datenschutz
Fine Amount
€16,600
About this data
Cite as: Cookie Fines. Company - Germany (2023). Retrieved from cookiefines.eu
Last updated: