Court case III OSK 4763/21 – Court Ruling (Poland, 2022)
General GDPR enforcement action
This case relates to broader data protection obligations, not specifically to cookie or consent banner compliance. It is not included in cookie statistics or the Risk Calculator.
A Polish court ruled that a securitisation fund lawfully processed a person's data while collecting a debt. The person claimed the debt didn't exist and wanted their data erased. The court found the fund had a valid reason to keep processing the data, showing that debt collection can justify data use under GDPR.
What happened
A securitisation fund processed a person's data for debt collection, which the person claimed was unjustified because the debt was non-existent.
Who was affected
A person whose data was processed by a securitisation fund in Poland for debt collection purposes.
What the authority found
The court decided that the fund had a legitimate interest in processing the data for debt collection, even though the person disputed the debt's existence.
Why this matters
This ruling clarifies that debt collection can be a legitimate reason for processing personal data under GDPR. It underscores the need for individuals to address debt disputes through civil courts rather than data protection authorities.
GDPR Articles Cited
The proceedings started with a complaint made to the Polish DPA (UODO) in which a data subject claimed that the processing of their personal data by a non-standardised securitisation fund (fund) was not justified and lacked legal basis on the grounds that the debt being collected by the fund was non-existent. The plaintiff therefore requested that all of their personal data be removed from the fund’s database in accordance with Article 17(1) GDPR. The personal data obtained by the fund included: name, surname, date of birth, gender, national identification number, correspondence addresses, telephone number, e-mail address, as well as information on the claim broken down to financial components, including principal amount, interest and bank account number dedicated to debt repayment, the date of the contract and the date of termination of the contract. The UODO decided that the processing of personal data by the fund was lawful, since the fund acquired the debt from an original creditor in the performance of a contract under Article 28 GDPR. The UODO stated that as a debtor, the data subject must consider that their right to privacy may be limited in connection with the recovery of debts. The UODO emphasized, however, that it had not examined the factual elements regarding the existence of the debt or its amount, which are issues that should be determined by civil courts. The claimant, which disputed the existence of the debt, specifically complained about receiving importunate telephone calls by the fund. With regards to these allegations, the UODO explained that this issue must be considered in the context of established practices applied by debt collection agencies. The UODO, therefore, decided that the fund was not obligated to grant the data subject's erasure request, since it had a legitimate interest and legal basis for processing the data. The data subject appealed this decision to the Voivodship Administrative Court in Warsaw, on the basis that the UODO inco
Outcome
Court Ruling
A ruling by a national court on a data-protection matter.
Related Cases (0)
No other cases found for Court case III OSK 4763/21 in PL
This is the only recorded case for this entity in this jurisdiction.
Details
About this data
Cite as: Cookie Fines. Court case III OSK 4763/21 - Poland (2022). Retrieved from cookiefines.eu
Last updated: