Court case 12 B 19.1648 – Court Ruling (Germany, 2020)
General GDPR enforcement action
This case relates to broader data protection obligations, not specifically to cookie or consent banner compliance. It is not included in cookie statistics or the Risk Calculator.
A German court ruled that an online vacation rental platform cannot broadly share user data with authorities without specific legal authorization. The case involved a request for data to combat housing shortages, but the court emphasized the need for precise legal grounds to share such information. This decision protects user privacy against broad data requests.
What happened
A German court ruled that a vacation rental platform cannot share user data with authorities without specific legal authorization.
Who was affected
Users of an online vacation rental marketplace in Germany who rent out their apartments for more than 8 weeks a year.
What the authority found
The court determined that data sharing must be based on specific legal grounds and cannot be done broadly without proper authorization.
Why this matters
This decision reinforces the importance of protecting user privacy and requires companies to ensure legal grounds before sharing data with authorities. It highlights the need for precise legal frameworks when handling user data requests.
GDPR Articles Cited
National Law Articles
An Irish provider of an online vacation rental marketplace was asked by a Bavarian authority to transfer data of its users who are renting out their appartments for vacation purposes. The purpose was to fight the misappropriation of property in a tight housing market. The request was restricted to uses of an appartment for the purpose of providing accommodation for a period of more than 8 weeks in a calendar year. Is a request - not limited to the individual case - for the provision of information on all users of an online vacation rental marketplace who rent out their appartment for more than 8 weeks a calender year in order to fight shortage of living space by misappropriation of property possible and on what legal basis can a data transfer between the company and the requesting authority be based. The service provider must and may only provide information on the basis of Section 14 (2) of the German Telemedia Act if this provision entitles the service provider to provide information itself and if the requesting authority can also provide a corresponding, precisely tailored authorisation under special law for the right to information, transmission and receipt of data. If these conditions are not cumulatively fulfilled, the service provider cannot provide information. The "data protection opening clause" of Section 14 (2) of the German Telemedia Act (TMG) expressly permits the service provider to provide information only "in individual cases" and not based on broad screening criteria which would lead to the disclosure of uninvolved persons who may already have a permission granted by an authority to rent out their appartment. However, this would in each case presuppose a concrete initial suspicion relating to persons or accommodation. The fact of occasional, perhaps even multiple, short term or long term rentals, will typically not be sufficient to assume misuse without further indications of illegal activity. This is regardless of whether the rental is list
Outcome
Court Ruling
A ruling by a national court on a data-protection matter.
Related Cases (0)
No other cases found for Court case 12 B 19.1648 in DE
This is the only recorded case for this entity in this jurisdiction.
Details
About this data
Cite as: Cookie Fines. Court case 12 B 19.1648 - Germany (2020). Retrieved from cookiefines.eu
Last updated: