Enforcing jurisdiction
Germany · Geography does not establish applicable law.
Confirmed applicable legislation
No confirmed legal basis recorded.

Court case 12 B 19.1648 – Court Ruling (Germany, 2020)

Court Ruling
DPA VGMnchen20 May 2020Germany
final
Court Ruling

Privacy enforcement record

This record is classified outside cookie consent. Subject classification does not confirm an applicable law. It is not included in cookie statistics or the Risk Calculator.

A German court ruled that an online vacation rental company could not provide user data to authorities without specific legal grounds. This is important because it protects users' privacy and ensures that data sharing is justified.

What happened

The court decided that the company could not share user data with authorities based on broad requests.

Who was affected

Users of the online vacation rental marketplace whose data was requested by Bavarian authorities.

What the authority found

The court found that the request for user data lacked a proper legal basis and could not be fulfilled under current laws.

Why this matters

This case highlights the importance of protecting user data from broad government requests. Companies should be cautious and ensure they have a legal basis before sharing any personal information.

Recorded legal citations
Automatically processed
Art. 6(1)(c) GDPR
Art. 6(2) GDPR
Art. 6(3) GDPR
View original scraped data
Art. 6(1)(c) GDPR
Art. 6(2) GDPR
Art. 6(3) GDPR

Original imported citations before automated processing; the processing history does not establish independent verification.

National Law Articles
AI-identified
Article 2 (1), Article 1 (1) Grundgesetz - GG (German Basic Law)
Article 3 (1) Zweckentfremdungsgesetz - ZwEWG (Bavarian misappropriation of property law)
§ 12 (1) Satzung über das Verbot der Zweckentfremdung von Wohnraum - ZeS (Statute on the prohibition of misappropriation of housing)
§ 14 (II) Telemediengesetz - TMG (Telemedia Law)
§ 3 (II), (V) Telemediengesetz - TMG (Telemedia Law)
Decision AuthorityVGH München
Reviewed AuthorityVG München (Germany)

Source checks

Secondary-source text retrieved.

Automated check recorded — 18 March 2026.

Processing notes: articles corrected, national law identified, authority corrected.

Retrieved text may be a secondary summary or an announcement. These automated statuses do not establish that the original decision was read or that the record received an independent legal review. How we check sources

Full Legal Summary
Detailed

An Irish provider of an online vacation rental marketplace was asked by a Bavarian authority to transfer data of its users who are renting out their appartments for vacation purposes. The purpose was to fight the misappropriation of property in a tight housing market. The request was restricted to uses of an appartment for the purpose of providing accommodation for a period of more than 8 weeks in a calendar year. Is a request - not limited to the individual case - for the provision of information on all users of an online vacation rental marketplace who rent out their appartment for more than 8 weeks a calender year in order to fight shortage of living space by misappropriation of property possible and on what legal basis can a data transfer between the company and the requesting authority be based. The service provider must and may only provide information on the basis of Section 14 (2) of the German Telemedia Act if this provision entitles the service provider to provide information itself and if the requesting authority can also provide a corresponding, precisely tailored authorisation under special law for the right to information, transmission and receipt of data. If these conditions are not cumulatively fulfilled, the service provider cannot provide information. The "data protection opening clause" of Section 14 (2) of the German Telemedia Act (TMG) expressly permits the service provider to provide information only "in individual cases" and not based on broad screening criteria which would lead to the disclosure of uninvolved persons who may already have a permission granted by an authority to rent out their appartment. However, this would in each case presuppose a concrete initial suspicion relating to persons or accommodation. The fact of occasional, perhaps even multiple, short term or long term rentals, will typically not be sufficient to assume misuse without further indications of illegal activity. This is regardless of whether the rental is list

Outcome

Court Ruling

A ruling by a national court on a data-protection matter.

Related Cases (0)

No other cases found for Court case 12 B 19.1648 in DE

This is the only recorded case for this entity in this jurisdiction.

Details

Ruling Date

20 May 2020

Authority

DPA VGMnchen

About this data

Data: GDPRhub (noyb.eu)
Licensed under CC BY-NC-SA 4.0
Automatically normalized and classified

Cite as: Cookie Fines. Court case 12 B 19.1648 - Germany (2020). Retrieved from cookiefines.eu

Report Inaccuracy

Last updated: