Court case 2020/813/A – Court Ruling (Belgium, 2020)
General GDPR enforcement action
This case relates to broader data protection obligations, not specifically to cookie or consent banner compliance. It is not included in cookie statistics or the Risk Calculator.
A Belgian court ruled on a case where a company wrongly linked a woman's name to a business, leading to a payment demand. The court found that while the company deleted her data related to that business, it could still process her data for other purposes if it had a legitimate interest. This case highlights the importance of accurate data handling and clarifies that not all data processing is automatically unlawful.
What happened
GRAYDON mistakenly associated Mrs. KAHN with a company, leading to a payment request she challenged.
Who was affected
Mrs. KAHN, who was wrongly linked to the EGAR company in GRAYDON's records.
What the authority found
The court decided that GRAYDON's processing of Mrs. KAHN's data was not automatically unlawful if based on a legitimate interest.
Why this matters
This ruling clarifies that companies can process personal data under legitimate interests even if consent is withdrawn, as long as the processing is lawful. Businesses should ensure data accuracy and understand the legal bases for processing personal data.
GDPR Articles Cited
GRAYDON wrongly associated Mrs. KAHN’s name with the EGAR company. Consequently, on 31 July 2019, Mrs. KAHN was requested by a bailiff to pay the amount of 537.02 euros on behalf of EGAR as part of the mandatory annual contribution. Mrs. KAHN claimed the existence of a misidentification and challenged the lawfulness of the processing of her personal data. She requested the deletion of all her personal data appearing in GRAYDON’s file. Does a misidentification of a data subject in connection with a specific company in a register and a request for deletion arising from this data subject necessarily imply that any processing of his/her personal data in this register is unlawful under article 6 GDPR? The Tribunal declared the action admissible and observed that GRAYDON spontaneously deleted Mrs. KAHN's personal data in connection with EGAR. However, the Tribunal stated that the processing of her personal data by GRAYDON in relation to other legal persons is not automatically unlawful. Despite the withdrawal of consent by Mrs. KAHN, GRAYDON may base the processing of personal data on a legitimate interest (Article 6(1) GDPR).
Outcome
Court Ruling
A ruling by a national court on a data-protection matter.
Related Cases (0)
No other cases found for Court case 2020/813/A in BE
This is the only recorded case for this entity in this jurisdiction.
Details
About this data
Cite as: Cookie Fines. Court case 2020/813/A - Belgium (2020). Retrieved from cookiefines.eu
Last updated: