- Enforcing jurisdiction
- Germany · Geography does not establish applicable law.
- Confirmed applicable legislation
- No confirmed legal basis recorded.
- Privacy topics
Company – €16,600 Fine (Germany, 2023)
Privacy enforcement record
This record is classified outside cookie consent. Subject classification does not confirm an applicable law. It is not included in cookie statistics or the Risk Calculator.
A real estate company in Germany was fined EUR 16,600 for not having a proper agreement with another company that shared control over personal data. They also collected personal data without a legal reason and failed to respond quickly to a request to delete that data. This case highlights the importance of having clear agreements and legal bases for handling personal data.
What happened
The DPA imposed a fine of EUR 16,600 on a real estate company for failing to conclude a joint controllership agreement and for collecting personal data without a legal basis.
Who was affected
Visitors whose personal data was collected by the real estate company were affected.
What the authority found
The authority found that the company did not have a valid legal basis for processing personal data and failed to comply with a deletion request in a timely manner, violating GDPR requirements.
Why this matters
This ruling emphasizes the need for companies to have proper agreements when sharing control over personal data. It serves as a reminder for businesses to ensure they have legal bases for data processing and to respond to deletion requests promptly.
View original scraped data
Original imported citations before automated processing; the processing history does not establish independent verification.
Source checks
Linked-source text retrieved.
Automated check recorded — 13 March 2026.
Processing notes: authority corrected.
Retrieved text may be a secondary summary or an announcement. These automated statuses do not establish that the original decision was read or that the record received an independent legal review. How we check sources
The DPA of Niedersachsen has imposed a fine of EUR 16,600 on a company in the real estate industry for failing to conclude a joint controllership agreement. In addition, the controller had collected personal data without a legal basis and had not complied with a deletion request in good time.
Related Enforcement Actions (4)
Other enforcement actions involving Company in DE
Fine
€17K
Details
Fine Date
1 January 2023
Authority
Bundesbeauftragter für den Datenschutz
Fine Amount
€16,600
About this data
Cite as: Cookie Fines. Company - Germany (2023). Retrieved from cookiefines.eu
Last updated: