Enforcing jurisdiction
Austria · Geography does not establish applicable law.
Confirmed applicable legislation

Sky Österreich Fernsehen GmbH – Court Ruling (Austria, 2021)

Court Ruling
DPA HGWien26 May 2021Austria
final
Court Ruling

Privacy enforcement record

This record is classified outside cookie consent. Subject classification does not confirm an applicable law. It is not included in cookie statistics or the Risk Calculator.

An Austrian court ruled against Sky Österreich for using unfair terms in its customer agreements. The court found that Sky's clauses about data sharing and consent were invalid under GDPR. This decision protects consumer rights and sets a standard for fair data practices.

What happened

The court invalidated several clauses in Sky Österreich's terms and conditions for violating GDPR.

Who was affected

Sky's customers, who were subjected to unfair terms regarding their personal data, were affected.

What the authority found

The court ruled that the clauses violated GDPR and were therefore invalid.

Why this matters

This case shows that companies must ensure their terms and conditions comply with data protection laws. Businesses should review their agreements to protect consumer rights.

Recorded legal citations
Automatically processed
Art. 4(2) GDPR
Art. 5(1)(a) GDPR
Art. 5(1)(b) GDPR
Art. 5(1)(c) GDPR
Art. 5(1)(d) GDPR
Art. 6(4) GDPR
Art. 13(1)(e) GDPR
Art. 13(1)(f) GDPR
View original scraped data
Art. 4(2) GDPR
Art. 5(1)(b) GDPR
Art. 5(1)(c) GDPR
Art. 5(1)(d) GDPR
Art. 5(1)(a) GDPR
Art. 6(4) GDPR
Art. 13(1)(e) GDPR
Art. 13(1)(f) GDPR

Original imported citations before automated processing; the processing history does not establish independent verification.

National Law Articles
AI-identified
§ 6(3) KSchG
§ 28 KSchG
§ 1 DSG
Decision AuthorityHG Wien

Source checks

Linked-source text retrieved.

Review needed — 18 March 2026.

Processing notes: articles corrected, national law identified, date discrepancy.

Retrieved text may be a secondary summary or an announcement. These automated statuses do not establish that the original decision was read or that the record received an independent legal review. How we check sources

Full Legal Summary
Detailed

The claimant is an Austrian consumer protection institution (Verein für Konsumentinformation). It filed a Verbandsklage pursuant to § 28 of the Austrian Consumer Protection Act (KSchG) to stop the use of three (general terms and conditions) clauses with the Commercial Court of Vienna (HG Wien). A Verbandsklage is a form of popular action in which associations are granted standing not to assert the violation of their own rights, but of the rights of the general public. Clause 1: Pursuant to Sky's terms and conditions, consumers are obliged to immediately notify Sky of any changes to the data provided and notices sent to the last known address of consumers shall be deemed received. However, Sky customers received a letter with the Clause 1 informing them that their customer data should be passed on to Austrian Post for verification. If the data stored at the post office did not match the Sky data, the Sky data should be updated. Consent for the data comparison was not obtained from the customers. Sky rather invoked the legal basis of Article 6(1)(f) GDPR. If data subjects are against the verification, they should explicitly object to it. Clause 2: The second clause dealt with the transfer of data and with storage periods. Among other things, it was stated here that data may be transferred to third parties who have a contractual relationship with the subscriber (e.g. IPTV providers) and to service providers who provide services on behalf of Sky. It also stated that Sky stores the data within the statutory retention periods (in particular according to the Austrian Company Code (UGB) and the Austrian Federal Tax Code (BAO)). Clause 3: Finally, Sky's general terms and conditions stipulated that further framework data from the subscription contract may be processed for the purpose of direct advertising. The court ruled that all clauses violate the GDPR and are therefore invalid. = First, the court found that the VDI itself may assert the infringement. In particular,

Outcome

Court Ruling

A ruling by a national court on a data-protection matter.

Related Cases (0)

No other cases found for Sky Österreich Fernsehen GmbH in AT

This is the only recorded case for this entity in this jurisdiction.

Details

Ruling Date

26 May 2021

Authority

DPA HGWien

About this data

Data: GDPRhub (noyb.eu)
Licensed under CC BY-NC-SA 4.0
Automatically normalized and classified

Cite as: Cookie Fines. Sky Österreich Fernsehen GmbH - Austria (2021). Retrieved from cookiefines.eu

Report Inaccuracy

Last updated: