Enforcing jurisdiction
Austria · Geography does not establish applicable law.
Confirmed applicable legislation
No confirmed legal basis recorded.

Complainant: unnkown GmbH (limited company), pharma trade – Dismissed (Austria, 2020)

Dismissed
Datenschutzbehörde25 May 2020Austria
final
Dismissed

Privacy enforcement record

This record is classified outside cookie consent. Subject classification does not confirm an applicable law. It is not included in cookie statistics or the Risk Calculator.

A complaint from an unknown GmbH about data processing by the BASG was dismissed. This matters because it clarifies that legal entities can seek data protection rights. The decision reinforces the idea that companies have rights under data protection laws.

What happened

The complaint from an unknown GmbH regarding BASG's data processing was dismissed.

Who was affected

The unknown GmbH, a limited company in the pharmaceutical trade.

What the authority found

The authority ruled that the BASG did not violate any data protection rights during the audit process.

Why this matters

This ruling establishes that companies can assert their data protection rights. Businesses should be aware of their rights and obligations under data protection laws.

Recorded legal citations
Automatically processed
Art. 4(1) GDPR
Art. 9(1) GDPR
View original scraped data
Art. 4(1) GDPR
Art. 9(1) GDPR

Original imported citations before automated processing; the processing history does not establish independent verification.

National Law Articles
AI-identified
§ 1 DSG
§ 4 DSG
§ 24 DSG

Entities Involved

Complainant: unnkown GmbH (limited company), pharma trade
Respondent: Bundesamt für Sicherheit im Gesundheitswesen (BASG)

Source checks

Linked-source text retrieved.

Automated check recorded — 19 March 2026.

Processing notes: articles corrected, national law identified.

Retrieved text may be a secondary summary or an announcement. These automated statuses do not establish that the original decision was read or that the record received an independent legal review. How we check sources

Full Legal Summary
Detailed

The complainant (hereinafter the "company") is a limited company under Austrian law conducting business as pharmacy wholesale. It was subject to an audit of the Bundesamt für Sicherheit im Gesundheitswesen (hereinafter "BASG"), the Austrian Federal Office for Safety in Health Care. In the course of this audit, the BASG processed personal data of the company. The company lodged a complaint with the DSB, claiming that the BASG had violated the company's right to confidentiality of personal data pursuant to §1(1) DSG by unlawfully collecting, processing, disclosing and failing to delete the company's personal data ex officio. The BASG contested the company's entitlement to lodge a complaint with the DSB, as the company was not a natural person. Further, the BASG contested to have violated any data protection rights, mainly because under Austrian Law the BASG was under a legal obligation to process the data in connection with the audit. *Does §1 DSG apply to legal persons? *If so, do the provisions of the DSG, which deal with the procedure before the DSB, also apply to legal persons? The DSB held that at a legal person has the constitutional right to data protection under § 1 DSG (Austrian Data Protection Act) and is entitled to lodge a complaint before the DSB if these rights are violated. The DSB further held that the procedural provisions of the DSG - which deal with the procedure before the DSB - also apply regarding data protection complaints lodged by legal persons. The DSB reasoned as follows: *§1 DSG has a wider scope of applicability than Article 8 GRC (the latter only protects natural persons). *As Article 16(2) TFEU leaves it to member states to grant data protection rights to legal persons as well as long as this does compromise the level of protection of the GRC, nor the primacy, unity and effectiveness of Union law. *The provisions of the DSG - which deal with the procedure before the DSB - must also apply on legal persons because the Austrian legisla

Outcome

Dismissed

The complaint or investigation was dismissed.

Related Enforcement Actions (0)

No other enforcement actions found for Complainant: unnkown GmbH (limited company), pharma trade in AT

This is the only recorded action for this entity in this jurisdiction.

Details

Decision Date

25 May 2020

Authority

Datenschutzbehörde

About this data

Data: GDPRhub (noyb.eu)
Licensed under CC BY-NC-SA 4.0
Automatically normalized and classified

Cite as: Cookie Fines. Complainant: unnkown GmbH (limited company), pharma trade - Austria (2020). Retrieved from cookiefines.eu

Report Inaccuracy

Last updated: