Enforcing jurisdiction
Poland · Geography does not establish applicable law.
Confirmed applicable legislation
No confirmed legal basis recorded.

Court case III OSK 161/21 – Court Ruling (Poland, 2021)

Court Ruling
DPA WSAWarsaw20 April 2021Poland
final
Court Ruling

Privacy enforcement record

This record is classified outside cookie consent. Subject classification does not confirm an applicable law. It is not included in cookie statistics or the Risk Calculator.

A Polish court ruled that a company could not use a single consent to process personal data for marketing purposes. This decision is significant because it clarifies how consent must be obtained for data processing.

What happened

The court dismissed a company's appeal regarding the legality of its marketing consent practices.

Who was affected

Potential customers who were approached for marketing purposes by the company.

What the authority found

The court held that consent for data processing must be specific and separate from the marketing methods used.

Why this matters

This ruling sets a clear standard for how companies should obtain consent for marketing. Businesses must ensure that consent is informed and specific to comply with data protection laws.

Recorded legal citations
Automatically processed
Art. 5(1)(c) GDPR
Art. 5(2) GDPR
View original scraped data
Art. 5(1)(c) GDPR
Art. 5(2) GDPR

Original imported citations before automated processing; the processing history does not establish independent verification.

National Law Articles
AI-identified
Art. 23(1)(1) Personal Data Protection Act (1997)
Art. 23(1)(5) Personal Data Protection Act (1997)
Art. 172(1) Telecommunications Law
Decision AuthorityNSA
Reviewed AuthorityWSA Warsaw (Poland)

Source checks

Linked-source text retrieved.

Automated check recorded — 18 March 2026.

Processing notes: articles corrected, national law identified, authority corrected.

Retrieved text may be a secondary summary or an announcement. These automated statuses do not establish that the original decision was read or that the record received an independent legal review. How we check sources

Full Legal Summary
Detailed

The Company V. obtained from potential customers (i.e. persons applying for a loan) and customers the following consent: "I consent to the processing of my personal data by V. Sp. z o.o. for the purpose of direct marketing relating to the products and services of entities belonging to the "[...]" capital group, carried out by using telecommunications terminal equipment and automatic calling systems in accordance with Article 172 of the Telecommunications Law (Journal of Laws of 2014, item 234, as amended), and for this purpose I make available the data provided by me in this application with regard to: e-mail address and telephone number.". In relation to persons who gave the above consent, the Company conducted marketing activities by making telephone calls, sending text messages and emails. The General Inspector for Personal Data Protection issued a decision against the Company, which was appealed to the Provincial Administrative Court in Warsaw. In its judgment of 26 February 2018, ref. II SA/Wa 943/17, it dismissed the complaint of the company V. The Company appealed from the above judgment. The dispute concerned whether, on the grounds of the Act of 29 August 1997 on personal data protection, it is permissible to express a single consent to processing personal data for the purpose of direct marketing of the Company's products and using telecommunications terminal equipment for the purpose of such marketing, referred to in Article 172 of the Act of 16 July 2004 Telecommunications Law. The Supreme Administrative Court has dismissed the cassation appeal. The court held that the expression of consent to the processing of data for marketing purposes is a prerequisite for the lawfulness of processing of personal data by the data controller, and the consent is independent of the means by which the marketing is directed and should be separated from the means of direct marketing. The person giving consent must understand the essence of the consent, its purpose and

Outcome

Court Ruling

A ruling by a national court on a data-protection matter.

Related Cases (0)

No other cases found for Court case III OSK 161/21 in PL

This is the only recorded case for this entity in this jurisdiction.

Details

Ruling Date

20 April 2021

Authority

DPA WSAWarsaw

About this data

Data: GDPRhub (noyb.eu)
Licensed under CC BY-NC-SA 4.0
Automatically normalized and classified

Cite as: Cookie Fines. Court case III OSK 161/21 - Poland (2021). Retrieved from cookiefines.eu

Report Inaccuracy

Last updated: