Enforcing jurisdiction
Germany · Geography does not establish applicable law.
Confirmed applicable legislation
No confirmed legal basis recorded.

Court case ECLI:DE:LGMS:2023:0704.16O238.22.00 – Court Ruling (Germany, 2023)

Court Ruling
DPA LGMnster4 July 2023Germany
final
Court Ruling

Privacy enforcement record

This record is classified outside cookie consent. Subject classification does not confirm an applicable law. It is not included in cookie statistics or the Risk Calculator.

A court ruled against a credit agency for processing a person's insolvency data without a valid legal basis. The court found that the agency retained this information longer than allowed by law, harming the person's ability to obtain credit. This case emphasizes the need for companies to respect individuals' rights in data processing.

What happened

A credit agency registered a person's insolvency data beyond the legal retention period and without proper justification.

Who was affected

The affected person was an individual whose insolvency information was improperly processed by the credit agency.

What the authority found

The court held that the credit agency violated GDPR by failing to have a legal basis for processing the individual's data and retaining it beyond the permitted time frame.

Why this matters

This ruling reinforces the importance of adhering to data retention laws and protecting individuals' rights. Companies must ensure they have a valid legal basis for any data processing activities.

Recorded legal citations
Automatically processed
Art. 6(1)(f) GDPR
View original scraped data
Art. 6(1)(f) GDPR

Original imported citations before automated processing; the processing history does not establish independent verification.

Decision AuthorityLG Münster

Source checks

Linked-source text retrieved.

Review needed — 18 March 2026.

Processing notes: articles corrected, national law identified, amount discrepancy.

Retrieved text may be a secondary summary or an announcement. These automated statuses do not establish that the original decision was read or that the record received an independent legal review. How we check sources

Full Legal Summary
Detailed

The data subject had faced insolvency proceedings, which were announced on a publicly accessible database. This publication is legally retained and made publicly available for 6 months following insolvency proceedings under German law.§3 of the Ordinance on Public Announcements in Insolvency Proceedings and Restructuring Matters on the Internet (InsBekV) available, [https://www.gesetze-im-internet.de/insobekv/__3.html here]. A credit agency (the controller) had negatively registered the data subject using the information from the public database and transmitted the data subject’s negative registration to its contractual partners. As a result, the data subject was unable to apply for credit products. After being rejected for various credit-related applications due to their negative registration, the data subject filed a suit against the credit agency in the Regional Court of Münster. The Court held that the controller was in violation of Article 6(1) GDPR, as they lacked a legal basis for processing the data subject’s data. The Court held that the controller was unable to rely on Article 6(1)(f) GDPR for processing, because the economic interests of the controller could not override those of the data subject. Moreover, the controller had retained the data subject’s insolvency information beyond the 6-month period provided for under domestic law. The data subject’s interests and rights took precedence over those of the controller. The negative registration created an unwarranted detriment to the data subject’s economic life. The Court concluded that the controller’s processing significantly interfered with the data subject’s constitutional right to self-determination under Article 1,2 of German Basic Law, the right to data protection under Article 8 of the European Charter of Fundamental Rights, and the data subject’s general freedom of action, freedom of contract, and the freedom to exercise a profession. Consequently, the controller was unable to rely on Article

Outcome

Court Ruling

A ruling by a national court on a data-protection matter.

Related Cases (0)

No other cases found for Court case ECLI:DE:LGMS:2023:0704.16O238.22.00 in DE

This is the only recorded case for this entity in this jurisdiction.

Details

Ruling Date

4 July 2023

Authority

DPA LGMnster

About this data

Data: GDPRhub (noyb.eu)
Licensed under CC BY-NC-SA 4.0
Automatically normalized and classified

Cite as: Cookie Fines. Court case ECLI:DE:LGMS:2023:0704.16O238.22.00 - Germany (2023). Retrieved from cookiefines.eu

Report Inaccuracy

Last updated: