Court case C/02/438794 / HA RK 25-192 (E) – Court Ruling (Netherlands, 2025)
General GDPR enforcement action
This case relates to broader data protection obligations, not specifically to cookie or consent banner compliance. It is not included in cookie statistics or the Risk Calculator.
The data subject is a participant in a pension fund operated by the controller. He receives pension benefits and is concerned about the accuracy of his pension accrual, particularly in light of the upcoming transition to a new pension system. Because no rights can be derived from the Uniform Pension Overview (UPO), the data subject tried obtaining more certainty regarding the correctness of his pension. Relying on Article 15 GDPR, the data subject requested that the controller provide (i) a complete overview of the personal data on which his pension calculation was based, (ii) a clear explanation of how those data resulted in the pension amounts shown in the UPO, and (iii) a confirmation that the data used were correct. The requested information included, inter alia, pensionable salary, part-time percentages, years of service, and value transfers. The controller refused to provide the requested information. It argued that the GDPR did not provide a legal basis for the request, that the data subject had already retired before the GDPR became applicable, and that the requested information did not qualify as personal data. The controller further submitted that the GDPR was not intended to enable verification of pension calculations or pension administration and that the relevant data were already accessible through the UPO. The data subject brought proceedings before the Court, seeking an order to the controller to provide the requested information, a penalty payment, and an award of costs. The Court dismissed the request in its entirety. The Court held that the scope of the right of access under Article 15 GDPR is limited to personal data as defined in Article 4(1) GDPR. While that concept is broad and may include both objective and subjective information relating to an identifiable person, it does not extend to calculations themselves. The Court found that the data subject’s request was primarily aimed at obtaining the pension calculations themselves and a comprehe
GDPR Articles Cited
The data subject is a participant in a pension fund operated by the controller. He receives pension benefits and is concerned about the accuracy of his pension accrual, particularly in light of the upcoming transition to a new pension system. Because no rights can be derived from the Uniform Pension Overview (UPO), the data subject tried obtaining more certainty regarding the correctness of his pension. Relying on Article 15 GDPR, the data subject requested that the controller provide (i) a complete overview of the personal data on which his pension calculation was based, (ii) a clear explanation of how those data resulted in the pension amounts shown in the UPO, and (iii) a confirmation that the data used were correct. The requested information included, inter alia, pensionable salary, part-time percentages, years of service, and value transfers. The controller refused to provide the requested information. It argued that the GDPR did not provide a legal basis for the request, that the data subject had already retired before the GDPR became applicable, and that the requested information did not qualify as personal data. The controller further submitted that the GDPR was not intended to enable verification of pension calculations or pension administration and that the relevant data were already accessible through the UPO. The data subject brought proceedings before the Court, seeking an order to the controller to provide the requested information, a penalty payment, and an award of costs. The Court dismissed the request in its entirety. The Court held that the scope of the right of access under Article 15 GDPR is limited to personal data as defined in Article 4(1) GDPR. While that concept is broad and may include both objective and subjective information relating to an identifiable person, it does not extend to calculations themselves. The Court found that the data subject’s request was primarily aimed at obtaining the pension calculations themselves and a comprehe
Outcome
Court Ruling
A ruling by a national court on a data-protection matter.
Related Cases (0)
No other cases found for Court case C/02/438794 / HA RK 25-192 (E) in NL
This is the only recorded case for this entity in this jurisdiction.
Details
About this data
Cite as: Cookie Fines. Court case C/02/438794 / HA RK 25-192 (E) - Netherlands (2025). Retrieved from cookiefines.eu
Last updated: