Company – €16,600 Fine (Germany, 2023)
General GDPR enforcement action
This case relates to broader data protection obligations, not specifically to cookie or consent banner compliance. It is not included in cookie statistics or the Risk Calculator.
A real estate company in Germany was fined EUR 16,600 for not having a joint controllership agreement and for collecting data without a legal basis. They also failed to delete data when requested. This case shows the importance of having proper agreements and respecting data deletion requests.
What happened
A real estate company collected personal data without a legal basis and failed to establish a joint controllership agreement.
Who was affected
Individuals whose personal data was collected and not deleted upon request by the real estate company.
What the authority found
The DPA found the company violated GDPR by not having a joint controllership agreement and by failing to comply with data collection and deletion requirements.
Why this matters
This case serves as a reminder for companies to establish clear data processing agreements and to comply with data deletion requests. Proper legal frameworks are essential to avoid fines and ensure data protection compliance.
GDPR Articles Cited
The DPA of Niedersachsen has imposed a fine of EUR 16,600 on a company in the real estate industry for failing to conclude a joint controllership agreement. In addition, the controller had collected personal data without a legal basis and had not complied with a deletion request in good time.
Related Enforcement Actions (20)
Other enforcement actions involving Company in DE
Fine
€17K
Details
Fine Date
1 January 2023
Authority
Bundesbeauftragter für den Datenschutz
Fine Amount
€16,600
Enforcement Tracker ID
ETid-2433
About this data
Cite as: Cookie Fines. Company - Germany (2023). Retrieved from cookiefines.eu
Last updated: