Rb. Amsterdam - ECLI:NL:RBAMS:2023:7218: Difference between revisions
m (→Holding) |
mNo edit summary |
||
| (5 intermediate revisions by 2 users not shown) | |||
| Line 62: | Line 62: | ||
}} | }} | ||
A | A Dutch court refused to enforce a data subject's objection to processing ([[Article 21 GDPR|Article 21(1) GDPR]]), which requested that their negative credit registration be removed from the Netherlands' national Credit Information System, as the data subject had no overriding interests, rights or freedoms against the legitimate interests of the controller. | ||
== English Summary == | == English Summary == | ||
| Line 69: | Line 69: | ||
Rabobank (the controller) provided a business loan of €86,000 to the data subject in 2008. In 2014, the controller terminated their financial relationship with the data subject, as the data subject was unable to meet payments on time and had exceeded their credit limit. | Rabobank (the controller) provided a business loan of €86,000 to the data subject in 2008. In 2014, the controller terminated their financial relationship with the data subject, as the data subject was unable to meet payments on time and had exceeded their credit limit. | ||
In 2015, the data subject negotiated a new payment plan with the controller, but they were unable to maintain this. In September 2022, the data subject reached a new agreement with the controller, where the data subject paid €27,375 to the controller and the controller wrote off the remaining debt. On 6 October 2022, the controller formally waived their remaining claim against the data subject and the data subject | In 2015, the data subject negotiated a new payment plan with the controller, but they were unable to maintain this. In September 2022, the data subject reached a new agreement with the controller, where the data subject paid €27,375 to the controller and the controller wrote off the remaining debt. On 6 October 2022, the controller formally waived their remaining claim against the data subject and the controller negatively registered the data subject in the national Credit Information System (CKI). Under domestic regulations, the data subject's negative registration could only be removed after five years by the controller, on 6 October 2027. | ||
On 6 February 2023 and 27 February 2023, the data subject requested the controller to remove his negative registration from the system so that he could purchase a commercial property. In response to both requests, the controller refused, noting that there were no compelling grounds to shorten the five year registration period. | On 6 February 2023 and 27 February 2023, the data subject requested the controller to remove his negative registration from the system so that he could purchase a commercial property. In response to both requests, the controller refused, noting that there were no compelling grounds to shorten the five year registration period. | ||
Following the controller's refusals, the data subject filed a claim with the District Court of Amsterdam, requesting that his negative registration be removed. | Following the controller's refusals, the data subject filed a claim with the District Court of Amsterdam, requesting that his negative registration be removed (erasure request). One of the grounds to exercise the right of erasure is an [[Article 21 GDPR|Article 21(1) GDPR]] objection to processing, where there are no overriding legitimate grounds for the processing ([[Article 17 GDPR|Article 17(1)(c) GDPR]]). Consequently, the Court considered the data subject's claim on the basis of [[Article 21 GDPR|Article 21(1) GDPR]]. | ||
=== Holding === | === Holding === | ||
The Court refused to enforce the data subject's request, as they found that the data subject had no overriding interests, rights or freedoms against the legitimate interests of the controller under [[Article 21 GDPR|Article 21(1) GDPR]]. | The Court refused to enforce the data subject's request, as they found that the data subject had no overriding interests, rights or freedoms against the legitimate interests of the controller under [[Article 21 GDPR|Article 21(1) GDPR]]. | ||
The controller used Article 6(1)(f) GDPR as a legal basis for processing the data subject's personal data. In determining whether the data subject's interests, rights or freedoms could outweigh the legitimate interests of the controller, the Court took into account the following factors as part of its balancing exercise: | The controller used [[Article 6 GDPR|Article 6(1)(f) GDPR]] as a legal basis for processing the data subject's personal data. In determining whether the data subject's interests, rights or freedoms could outweigh the legitimate interests of the controller, the Court took into account the following factors as part of its balancing exercise: | ||
- the size of the debt and/or arrears; | - the size of the debt and/or arrears; | ||
- whether any payment arrangement has been | - whether any payment arrangement has been fully met; | ||
- whether the person concerned had other debts; | |||
- whether the person concerned | |||
- the passage of time since repayment of the debt; | - the passage of time since repayment of the debt; | ||
| Line 97: | Line 89: | ||
- the extent of the write-off. | - the extent of the write-off. | ||
The Court noted that in this case | The Court noted that in this case there was a substantial debt (€86,000.00) - half of which the controller eventually wrote off - and that the data subject had failed to meet its repayment obligations multiple times. Moreover, only one year of the five-year registration term had elapsed, therefore, the threshold for deletion of the registration was still high. | ||
As a result, the Court held that the data subject had no overriding interests, rights or freedoms against the controller, who had a legitimate interest in maintaining the negative registration and was entitled to reject the data subject's request. | |||
== Comment == | == Comment == | ||
Latest revision as of 11:14, 12 December 2023
| Rb. Amsterdam - ECLI:NL:RBAMS:2023:7218 | |
|---|---|
 | |
| Court: | Rb. Amsterdam (Netherlands) |
| Jurisdiction: | Netherlands |
| Relevant Law: | Article 6(1)(f) GDPR |
| Decided: | 15.11.2023 |
| Published: | 01.12.2023 |
| Parties: | Rabobank |
| National Case Number/Name: | ECLI:NL:RBAMS:2023:7218 |
| European Case Law Identifier: | ECLI:NL:RBAMS:2023:7218 |
| Appeal from: | |
| Appeal to: | |
| Original Language(s): | Dutch |
| Original Source: | de Rechtspraak (in Dutch) |
| Initial Contributor: | n/a |
A Dutch court refused to enforce a data subject's objection to processing (Article 21(1) GDPR), which requested that their negative credit registration be removed from the Netherlands' national Credit Information System, as the data subject had no overriding interests, rights or freedoms against the legitimate interests of the controller.
English Summary
Facts
Rabobank (the controller) provided a business loan of €86,000 to the data subject in 2008. In 2014, the controller terminated their financial relationship with the data subject, as the data subject was unable to meet payments on time and had exceeded their credit limit.
In 2015, the data subject negotiated a new payment plan with the controller, but they were unable to maintain this. In September 2022, the data subject reached a new agreement with the controller, where the data subject paid €27,375 to the controller and the controller wrote off the remaining debt. On 6 October 2022, the controller formally waived their remaining claim against the data subject and the controller negatively registered the data subject in the national Credit Information System (CKI). Under domestic regulations, the data subject's negative registration could only be removed after five years by the controller, on 6 October 2027.
On 6 February 2023 and 27 February 2023, the data subject requested the controller to remove his negative registration from the system so that he could purchase a commercial property. In response to both requests, the controller refused, noting that there were no compelling grounds to shorten the five year registration period.
Following the controller's refusals, the data subject filed a claim with the District Court of Amsterdam, requesting that his negative registration be removed (erasure request). One of the grounds to exercise the right of erasure is an Article 21(1) GDPR objection to processing, where there are no overriding legitimate grounds for the processing (Article 17(1)(c) GDPR). Consequently, the Court considered the data subject's claim on the basis of Article 21(1) GDPR.
Holding
The Court refused to enforce the data subject's request, as they found that the data subject had no overriding interests, rights or freedoms against the legitimate interests of the controller under Article 21(1) GDPR.
The controller used Article 6(1)(f) GDPR as a legal basis for processing the data subject's personal data. In determining whether the data subject's interests, rights or freedoms could outweigh the legitimate interests of the controller, the Court took into account the following factors as part of its balancing exercise:
- the size of the debt and/or arrears;
- whether any payment arrangement has been fully met;
- whether the person concerned had other debts;
- the passage of time since repayment of the debt;
- the extent of the write-off.
The Court noted that in this case there was a substantial debt (€86,000.00) - half of which the controller eventually wrote off - and that the data subject had failed to meet its repayment obligations multiple times. Moreover, only one year of the five-year registration term had elapsed, therefore, the threshold for deletion of the registration was still high.
As a result, the Court held that the data subject had no overriding interests, rights or freedoms against the controller, who had a legitimate interest in maintaining the negative registration and was entitled to reject the data subject's request.
Comment
Share your comments here!
Further Resources
Share blogs or news articles here!
English Machine Translation of the Decision
The decision below is a machine translation of the Dutch original. Please refer to the Dutch original for more details.
