Court case 4 U 1278/21 – Court Ruling (Germany, 2021)

Court Ruling
DPA LGChemnitz14 December 2021Germany
final
Court Ruling

General GDPR enforcement action

This case relates to broader data protection obligations, not specifically to cookie or consent banner compliance. It is not included in cookie statistics or the Risk Calculator.

A German court ruled in favor of a man mistakenly identified as a debtor due to a mix-up with his son's data. The court ordered the deletion of his data, emphasizing the importance of accurate data handling to prevent wrongful associations.

What happened

A collection agency mistakenly used a man's personal data, thinking he was a debtor, and the court ordered its deletion.

Who was affected

The affected person was a father who was wrongly identified as a debtor due to having the same name as his son.

What the authority found

The court ordered the deletion of the man's data, recognizing the error and the potential harm of being wrongly listed as a debtor.

Why this matters

This case highlights the critical need for companies to ensure data accuracy and prevent wrongful data associations. It serves as a warning about the potential consequences of data mix-ups, especially in financial contexts.

GDPR Articles Cited

Art. 4(1) GDPR
Art. 6(1)(c) GDPR
Art. 6(1)(f) GDPR
Art. 82(1) GDPR

National Law Articles

§ 147 AO
§ 823(1)BGB
§ 1004 BGB
Artikel 1(1) GG
Artikel 2(1) GG
Decision AuthorityOLG Dresden
Reviewed AuthorityLG Chemnitz (Germany)
Full Legal Summary
Detailed

In this case, the first controller is a collection agency which obtained an enforcement order from a court against a person with the same name as the data subject. During the enforcement procedure the debtor could not be found at the address which was originally stored with this first controller. As a result, the first controller asked a second controller to find out where the debtor lived. After its research, the second controller gave the first controller the personal information belonging to the data subject, thinking it was the actual debtor's data. This information included the data subject's name, date of birth and address. It turned out that the data subject and the debtor were father and son, and had the same first name and surname. The data subject (the father) requested and erasure of his data to both controllers since he was not the actual debtor they were searching for. He also requested injunctive relief to stop the controllers from processing his data in the future. Furthermore, he filed a complaint with Regional Court of Hannover (Landgericht Hannover - LG Hannover) claiming damages in the amount of €10,000 for potentially being registered as a debtor in Schufa's database, which is Germany's biggest credit agency. The controllers argued that they were allowed to process the data and obliged to retain it according to German tax law. Furthermore, they stated that the storage of the data was justified in order to avoid future confusions, which was not only in their own interest, but in the data subject's interest as well. Additionally, one of the controllers noted that the data subject was sufficiently protected from being held liable for his son's debt, since the data is marked as invalid in their database. The LG Hannover rejected the data subject's claim, who in turn appealed this decision with the Higher Regional Court of Dresden (Oberlandesgericht Dresden - OLG Dresden). The OLG Dresden overturned this decision, and ordered the deletion of the d

Outcome

Court Ruling

A ruling by a national court on a data-protection matter.

Related Cases (0)

No other cases found for Court case 4 U 1278/21 in DE

This is the only recorded case for this entity in this jurisdiction.

Details

Ruling Date

14 December 2021

Authority

DPA LGChemnitz

About this data

Data: GDPRhub (noyb.eu)
Licensed under CC BY-NC-SA 4.0
AI-verified and classified

Cite as: Cookie Fines. Court case 4 U 1278/21 - Germany (2021). Retrieved from cookiefines.eu

Report Inaccuracy

Last updated: