LfDI (Baden-Württemberg) - 21/09/2022

From GDPRhub
Revision as of 15:19, 25 September 2022 by Julia kraemer (talk | contribs) (Created page with "{{DPAdecisionBOX |Jurisdiction=Germany |DPA-BG-Color=background-color:#3d4f63; |DPAlogo=LogoDE-BW.png |DPA_Abbrevation=LfDI |DPA_With_Country=LfDI (Baden-Württemberg) |Case...")
(diff) ← Older revision | Latest revision (diff) | Newer revision → (diff)
LfDI - unknown
LogoDE-BW.png
Authority: LfDI (Baden-Württemberg)
Jurisdiction: Germany
Relevant Law: Article 6(1)(f) GDPR
Article 14 GDPR
§12 GBO
Type: Complaint
Outcome: Upheld
Started:
Decided:
Published: 21.09.2022
Fine: 55000 EUR
Parties: n/a
National Case Number/Name: unknown
European Case Law Identifier: n/a
Appeal: Not appealed
Original Language(s): German
Original Source: LfDI (in DE)
Initial Contributor: n/a

The DPA of Baden-Wuerttemberg (LfDI) issued a fine of €50,000 and €5000 against a real estate development company and a surveyor for misuse of land register data.

English Summary

Facts

A property owner, the data subject, had received a letter from a real estate developer offering them a purchase price for their property. The letter did not contain any information about the origin of his data, and even when asked, the addressee was not told where the real estate developer had obtained the data from. Subsequently, the fines office at the state commissioner's office determined that a surveyor had made use of his authority to inspect the electronic land register using the automated retrieval procedure, identified several hundred property owners without their knowledge and passed the corresponding information on to the real estate developer.

Holding

The LfDI decided that the case at hand constituted a breach of Article 6(1) GDPR. When weighing the interests in the context of Article 6(1)(f) GDPR, it must be taken into account that there was no prior business relationship between the data subjects and the real estate developer and that the data subjects did not have to assume that their data would be available in the land register for promotional approaches. In this context, the fact that property owners can object neither to the entry in the land register nor to the transfer of data is of particular importance since their data is collected on the basis of a statutory obligation which is not intended to serve advertising purposes.

The LfDI decided that the case at hand constituted a breach of Article 14 GDPR since the data subjects were not provided with any information on data processing. This is based on the effect that the information is an essential prerequisite for data subjects to be able to assert their right. An exemption under Article 14(5)(c) GDPR was not applicable since neither the body collecting the data nor the scope, purpose or duration of the data collection are apparent to data subjects when they are inspected by third parties under § 12 Grundbuchordnung (GBO, German land register code).


    • Fine assessment**

The LfDI imposed a fine of €50,000 and €5000 against a real estate development company and a surveyor. When computing the fine, the LfDI took into account the number of data subjects, the type of data involved and the significance of the violated provisions, the cooperation of the responsible bodies. The fines have been accepted by the responsible parties and therefore become legally binding.

Comment

Share your comments here!

Further Resources

Share blogs or news articles here!

English Machine Translation of the Decision

The decision below is a machine translation of the German original. Please refer to the German original for more details.

LfDI Baden-Württemberg has imposed fines for improper use of land register data
Data from public registers such as the land register are also not freely available
The state representative Dr. Stefan Brink: “Those responsible should be aware that public data also enjoys protection and is not freely available. The fines imposed in the present case make it clear that clandestine data processing using special access rights does not pay off. The General Data Protection Regulation also applies in the highly competitive building land market.”
The State Commissioner for Data Protection and Freedom of Information in Baden-Württemberg has imposed fines of EUR 50,000 and EUR 5,000 on a property developer and a surveyor for illegal data collection and transfer and breaches of information obligations.
A property owner in a new development area had received a letter from a property developer in which he was offered a purchase price for his property. The letter did not contain any information about the origin of his data, and even when asked, the addressee was not told where the developer got his data from, in particular the knowledge of his position as owner.
The fine office at the State Commissioner then determined that a surveyor had made use of his authorization to inspect the electronic land register in the automated retrieval process and in two cases had identified several hundred property owners without their knowledge and passed on the relevant information to a property developer. The latter, in turn, wrote to the owners determined in this way with a purchase price offer for their properties without providing the necessary information according to Art. 14 DS-GVO, in particular without informing about the origin of the data.
On the one hand, this procedure constitutes a violation of Art. 6 Para. 1 DS-GVO. When weighing up interests within the scope of Art. 6 Para. 1 Letter f DS-GVO, it must be taken into account that no prior business relationship existed and the owners did not have to assume that their data would be available in the land register for advertising purposes. The fact that property owners can neither object to the entry in the land register nor to the transmission of data is of particular importance here, rather their data is collected on the basis of a legal obligation. However, this legal obligation does not serve to address advertising, but rather to ensure legal certainty in real estate transactions. Accordingly, it is also generally recognized for the right to inspect the land register that a sole interest in acquisition does not entitle to inspect, rather concrete contract negotiations are required.
In addition, there was also a violation of Art. 14 DS-GVO in that the owners were not provided with any information on data processing, even when they were contacted. However, this information is an essential prerequisite for data subjects in order to be able to assert their rights under Art. 15 et seq. DS-GVO. There was also no reason for exclusion in the present case, in particular § 12 GBO does not constitute a legal regulation within the meaning of Art. 14 Para. 5 Letter c DS-GVO, since neither the data-collecting body nor The scope, purpose or duration of the data collection can be seen.
When assessing the fine, in addition to the number of people affected, the type of data affected and the importance of the violated regulations, the cooperation of the responsible bodies in the fine procedure was taken into account.
The fines were accepted by those responsible and are now legally binding.
For questions you can contact us on the telephone number
0711/615541-23 and by email: pressestelle@lfdi.bwl.de
Further information on data protection and freedom of information can be found on the Internet at www.baden-wuerttemberg.datenschutz.de or at www.datenschutz.de.