Enforcing jurisdiction
Austria · Geography does not establish applicable law.
Confirmed applicable legislation
Privacy topics

Court case W214 2216836-1 – Court Ruling (Austria, 2021)

Court Ruling
DPA BVwG24 March 2021Austria
final
Court Ruling

Privacy enforcement record

This record is classified outside cookie consent. Subject classification does not confirm an applicable law. It is not included in cookie statistics or the Risk Calculator.

An Austrian court ruled that a credit scoring agency could keep a person's payment history even after the debts were settled. The court found that the agency followed the rules for processing personal data. This ruling shows that credit agencies can maintain records for legitimate purposes.

What happened

The credit scoring agency refused to delete a person's payment history after the debts were paid.

Who was affected

The individual whose credit history was being assessed by the agency.

What the authority found

The court held that the agency had a valid reason to keep the payment information, complying with data protection laws.

Why this matters

This ruling clarifies that credit agencies can retain certain data for legitimate purposes. Individuals should understand how their credit information is used and retained.

Recorded legal citations
Automatically processed
Art. 5 GDPR
Art. 17 GDPR
Art. 4(1) GDPR
Art. 4(2) GDPR
Art. 6(1)(f) GDPR
View original scraped data
Art. 4(1) GDPR
Art. 4(2) GDPR
Art. 5(GDPR)
Art. 6(1)(f) GDPR
Art. 17(GDPR)

Original imported citations before automated processing; the processing history does not establish independent verification.

National Law Articles
AI-identified
§ 152 GewO
Decision AuthorityBVwG

Source checks

Linked-source text retrieved.

Automated check recorded — 21 March 2026.

Processing notes: national law identified.

Retrieved text may be a secondary summary or an announcement. These automated statuses do not establish that the original decision was read or that the record received an independent legal review. How we check sources

Full Legal Summary
Detailed

The controller is a credit scoring agency with a trade license according to § 152 of the Austrian Trade Regulation Act (GewO). It used, inter alia, two receivables against the data subject and various former addresses (8 moves in 11 years) in its file on the basis of which his creditworthiness was assessed. The receivables amounted to mid-double-digit amounts. They arose between 2016 and 2017. The data subject was in a so-called continued qualified default of payment with regard to both receivables. This means that there was a delay in payment, the first two reminders by the creditor and also a third reminder by a collection agency had been unsuccessful. In 2018, the data subject paid the receivables. The controller then entered a "positively settled" note for each of the receivables in its data system. The controller rejected the data subject’s request to delete the two receivables as well as all his former addresses. Subsequently, the data subject filed a complaint before the Austrian DPA (DSB). The DSB decided that the right to be forgotten was infringed since the controller did not follow the request. The controller has filed an administrative appeal against this decision. The Austrian Federal Administrative Court (BVwG) ruled that the data subject was not entitled to deletion. Such a right does not arise from Article 17(1)(a), (c) or (d) GDPR. In particular, this was justified by the fact that the processing operations at issue were in compliance with the principles of Article 5 GDPR and that they could be based on the legal basis of Article 6(1)(f) GDPR. = == The BVwG ruled that the principle of process limitation was respected. The assessment of creditworthiness by credit agencies is a defined and clear purpose recognised by the legal system. This can be derived from § 152 GewO. The data were also accurate and complete because the controller entered a “positively settled” remark after the two claims have been paid. They were also fundamentally necessary

Outcome

Court Ruling

A ruling by a national court on a data-protection matter.

Related Cases (0)

No other cases found for Court case W214 2216836-1 in AT

This is the only recorded case for this entity in this jurisdiction.

Details

Ruling Date

24 March 2021

Authority

DPA BVwG

About this data

Data: GDPRhub (noyb.eu)
Licensed under CC BY-NC-SA 4.0
Automatically normalized and classified

Cite as: Cookie Fines. Court case W214 2216836-1 - Austria (2021). Retrieved from cookiefines.eu

Report Inaccuracy

Last updated: