Court case 10 U 1633/22 – Court Ruling (Germany, 2023)
General GDPR enforcement action
This case relates to broader data protection obligations, not specifically to cookie or consent banner compliance. It is not included in cookie statistics or the Risk Calculator.
A court ruled that an insurance company must provide a customer with access to their personal data after a dispute over a premium increase. The court emphasized that the customer has the right to know how their data is used, which is crucial for transparency. This decision reinforces the importance of individuals being able to access their personal information.
What happened
The court ordered an insurance company to provide a customer access to their personal data after a premium dispute.
Who was affected
The customer who requested access to their personal data from the insurance company.
What the authority found
The Higher Regional Court of Koblenz ruled that the customer has a right to access their personal data under GDPR.
Why this matters
This case sets a precedent for the right to access personal data, reminding companies that they must comply with access requests. It encourages individuals to exercise their rights regarding personal information.
GDPR Articles Cited
The data subject and the controller were bound by an insurance contract. The controller increased the premium and the data subject claimed that such an increase was unlawful. Therefore, the data subject made an access request, to which the controller refused to reply. The data subject challenged the lawfulness of the premium increase in court and contextually asked the judge to order the controller to provide access to the requested information. The court of first instance dismissed the data subject’s access claim, stating that the latter was merely instrumental to prove the unlawfulness of the premium increase, without any autonomous data protection purpose. The data subject appealed the decision. The Higher Regional Court of Koblenz (Oberlandesgericht Koblenz – OLG Koblenz) overturned the first instance judgement. First, the court stressed how information concerning premium increases in an insurance agreement, like in general all contract details related to an individual, are personal data within the meaning of Article 4(1) GDPR. Second, the court referred to the CJEU judgement in case C-487/21 to clarify the scope of the data subject’s right to a copy of their personal data pursuant to Article 15(3) GDPR. The data subject had a right to a faithful and understandable reproduction of all their personal data processed by the controller. The court also pointed out how the right to a copy shall enable the data subject to enforce further data protection rights, such as right to erasure, rectification or objection. Finally, the court stated that the controller could not rely on Article 12(5) GDPR to avoid to reply to the access request. As a matter of fact, that is possible only insofar as a request is manifestly unfounded or excessive. It was uncontested by the controller that personal data were processed, therefore the request was not manifestly unfounded. Regarding the “excessiveness” of the access request, the court of first instance held that it did not dire
Outcome
Court Ruling
A ruling by a national court on a data-protection matter.
Related Cases (0)
No other cases found for Court case 10 U 1633/22 in DE
This is the only recorded case for this entity in this jurisdiction.
Details
About this data
Cite as: Cookie Fines. Court case 10 U 1633/22 - Germany (2023). Retrieved from cookiefines.eu
Last updated: