• Mehr als 3 Millionen Wörter Inhalt
  • |
  • in**@********aw.com
  • |
  • Tel: 03322 5078053
Rechtsanwalt Marian Härtel - ITMediaLaw

No products in the cart.

  • en English
  • de Deutsch
  • Informationen
    • Ideal partner
    • About lawyer Marian Härtel
    • Quick and flexible access
    • Principles as a lawyer
    • Why a lawyer and business consultant?
    • Focus areas of attorney Marian Härtel
      • Focus on start-ups
      • Investment advice
      • Corporate law
      • Cryptocurrencies, Blockchain and Games
      • AI and SaaS
      • Streamers and influencers
      • Games and esports law
      • IT/IP Law
      • Law firm for GMBH,UG, GbR
      • Law firm for IT/IP and media law
    • The everyday life of an IT lawyer
    • How can I help clients?
    • Testimonials
    • Team: Saskia Härtel – WHO AM I?
    • Agile and lean law firm
    • Price overview
    • Various information
      • Terms
      • Privacy policy
      • Imprint
  • Services
    • Support and advice of agencies
    • Contract review and preparation
    • Games law consulting
    • Consulting for influencers and streamers
    • Advice in e-commerce
    • DLT and Blockchain consulting
    • Legal advice in corporate law: from incorporation to structuring
    • Legal compliance and expert opinions
    • Outsourcing – for companies or law firms
    • Booking as speaker
  • News
    • Gloss / Opinion
    • Law on the Internet
    • Online retail
    • Law and computer games
    • Law and Esport
    • Blockchain and web law
    • Data protection Law
    • Copyright
    • Labour law
    • Competition law
    • Corporate
    • EU law
    • Law on the protection of minors
    • Tax
    • Other
    • Internally
  • Podcast
    • ITMediaLaw Podcast
  • Knowledge base
    • Laws
    • Legal terms
    • Contract types
    • Clause types
    • Forms of financing
    • Legal means
    • Authorities
    • Company forms
    • Tax
    • Concepts
  • Videos
    • Information videos – about Marian Härtel
    • Videos – about me (Couch)
    • Blogpost – individual videos
    • Videos on services
    • Shorts
    • Podcast format
    • Third-party videos
    • Other videos
  • Contact
Kurzberatung
  • Informationen
    • Ideal partner
    • About lawyer Marian Härtel
    • Quick and flexible access
    • Principles as a lawyer
    • Why a lawyer and business consultant?
    • Focus areas of attorney Marian Härtel
      • Focus on start-ups
      • Investment advice
      • Corporate law
      • Cryptocurrencies, Blockchain and Games
      • AI and SaaS
      • Streamers and influencers
      • Games and esports law
      • IT/IP Law
      • Law firm for GMBH,UG, GbR
      • Law firm for IT/IP and media law
    • The everyday life of an IT lawyer
    • How can I help clients?
    • Testimonials
    • Team: Saskia Härtel – WHO AM I?
    • Agile and lean law firm
    • Price overview
    • Various information
      • Terms
      • Privacy policy
      • Imprint
  • Services
    • Support and advice of agencies
    • Contract review and preparation
    • Games law consulting
    • Consulting for influencers and streamers
    • Advice in e-commerce
    • DLT and Blockchain consulting
    • Legal advice in corporate law: from incorporation to structuring
    • Legal compliance and expert opinions
    • Outsourcing – for companies or law firms
    • Booking as speaker
  • News
    • Gloss / Opinion
    • Law on the Internet
    • Online retail
    • Law and computer games
    • Law and Esport
    • Blockchain and web law
    • Data protection Law
    • Copyright
    • Labour law
    • Competition law
    • Corporate
    • EU law
    • Law on the protection of minors
    • Tax
    • Other
    • Internally
  • Podcast
    • ITMediaLaw Podcast
  • Knowledge base
    • Laws
    • Legal terms
    • Contract types
    • Clause types
    • Forms of financing
    • Legal means
    • Authorities
    • Company forms
    • Tax
    • Concepts
  • Videos
    • Information videos – about Marian Härtel
    • Videos – about me (Couch)
    • Blogpost – individual videos
    • Videos on services
    • Shorts
    • Podcast format
    • Third-party videos
    • Other videos
  • Contact
Rechtsanwalt Marian Härtel - ITMediaLaw

ECJ: How is “legitimate interest” to be interpreted in the GDPR?

2. January 2023
in Data protection Law
Reading Time: 6 mins read
0 0
A A
0
privacy policy 3583612 1920
Key Facts
  • The ECJ decides on the term "legitimate interest" in the GDPR on the basis of a request for a preliminary ruling.
  • The plaintiff, a sports association, is suing for a fine of 525,000 euros for data protection violations.
  • The central question is whether a commercial interest can fulfill the legal basis of the GDPR.
  • The defendant argues that only legally defined interests are to be regarded as legitimate.
  • The plaintiff claims that any interest can be justified as long as it does not contradict the law.
  • The referring court sees ambiguities in the definition of the term "legitimate interest" in the GDPR.
  • The decision could have a significant impact on the processing of personal data.

The ECJ, on the basis of a reference for a preliminary ruling under Art. 98 para. 1 of the Rules of Procedure of the Court of Justice to rule on an interesting point of law of the GDPR.

Content Hide
1. Original proceedings in the Netherlands
2. Subject matter and legal basis of the reference for a preliminary ruling
3. Template questions
4. Brief description of the facts and the main proceedings
5. Main arguments of the parties to the main proceedings
6. Brief presentation of the rationale of the template
6.1. Author: Marian Härtel

Original proceedings in the Netherlands

The main proceedings relate to an action brought by the plaintiff before the Rechtbank Amsterdam (District Court Amsterdam, the Netherlands) against the defendant’s decision of July 30, 2020. By that decision, the defendant dismissed as unfounded the plaintiff’s appeal against the decision of December 20, 2019, by which it had imposed a fine of EUR 525,000 on the plaintiff for a breach of the General Data Protection Regulation (“GDPR”).

Subject matter and legal basis of the reference for a preliminary ruling

The reference for a preliminary ruling pursuant to Article 267 TFEU concerns the question whether the term “legitimate interest” within the meaning of Article 6 para. 1(f) GDPR extends exclusively to interests defined by law (positive test) or any interest provided that it is not contrary to law (negative test) and, in particular, whether a purely commercial interest – such as the interest in making personal data available for consideration without the data subject’s consent – can be considered legitimate in certain circumstances and, if so, which circumstances are decisive for this.

Template questions

  1. How must the law bank interpret the term “legitimate interest”?
  2. Is this term to be interpreted as the defendant interprets it? Does it cover only interests that are part of the law, legal and set forth in a statute? Or:
  3. Can any interest be a legitimate interest provided it is not contrary to law? More specifically: Can a purely commercial interest and the interest at hand, namely the provision of personal data against payment without the consent of the data subject, be classified as a legitimate interest under certain circumstances? If so, what circumstances determine whether a purely commercial interest is a legitimate interest?

 

Brief description of the facts and the main proceedings

  • The plaintiff is a sports association. Its members are composed of the tennis clubs affiliated to it and their members. The plaintiff works with sponsors, including Nederlandse Loterij Organisatie BV and SportshopsDirect BV. In 2018, Plaintiff provided data on a portion of its members to these sponsors in exchange for a fee, which used the data for promotions via sales letters and telephone solicitation
  • Based on several advertisements alleging that the plaintiff had unlawfully disclosed personal data of its members to the aforementioned sponsors, the defendant initiated an investigation regarding the plaintiff’s compliance with the GDPR. According to the defendant, the plaintiff provided data of its members to the two sponsors in question without the members’ consent and without a lawful reason for sharing such data
  • By decision of December 20, 2019, the defendant imposed a fine of 525,000 euros on the plaintiff. The plaintiff appealed against this decision. By decision dated July 30, 2020, the defendant dismissed the complaint as unfounded. The plaintiff brought an action against the latter decision before the referring court.

Main arguments of the parties to the main proceedings

  • According to the GDPR, personal data may only be processed if this processing is based on a legal basis. Art. 1 GDPR lists these legal bases exhaustively. It is undisputed between the parties that Plaintiff did not have the consent of its members for the disclosure of those members’ data to the Sponsors. However, the plaintiff claims that he had a “legitimate interest” in this within the meaning of Art. 6 1 lit. f DSGVO, which the defendant denies. The parties thus disagree on the interpretation of the term “legitimate interest” and its scope.
  • According to the defendant, there must be a legitimate and thus concrete interest “belonging to the law, statutory and established in a law” (positive test).

In this regard, the defendant argues, inter alia, the following:

  • It follows from the 47th recital of the GDPR that the processing of personal data of persons who should not reasonably expect such processing cannot be based on a legitimate interest. It must be an interest of the controller that is recognizable in advance and that the data subject can expect. An interest that is not sufficiently identifiable in advance cannot be a legitimate interest. This interpretation also finds support in the position of the European Council in the context of the first reading of the GDPR.
  • According to Art. 52 of the Charter, restrictions with regard to Art. 8 of the Charter (right to protection of personal data) would have to be provided for by law and respect the essence of this right. It follows from the fourth recital of the GDPR that the GDPR in fact implements Article 52 of the Charter. In this light, an interest within the meaning of Art. 6 para. 1(f) of the GDPR, which is essentially a restriction of the right to the protection of personal data, must therefore at least affect public interest objectives recognized by the Union or be necessary to protect the rights and freedoms of others.
  • The collection and processing of personal data for the purpose of resale without the consent of the data subjects violates Article 8 ECHR. If the plaintiff has a legitimate interest, the limitation of Art. 8 ECHR is provided for by law, namely in the GDPR. Prior to the introduction of the GDPR, this restriction had not been provided for by law, so that the GDPR eliminates the previous contradiction with Art. 8 ECHR. The applicant’s position basically means that the protection now provided by the Charter and the GDPR is less than that guaranteed during the period when only the ECHR applied, which is incompatible with Article 53 of the Charter.
  • According to the plaintiff, there is a legitimate interest unless this interest runs counter to the law (negative test).
  • A “legitimate interest” need not be based on a fundamental right or a legal principle. It follows from the GDPR that other interests could also constitute a legitimate interest. Thus, the recital of the GDPR classifies “direct marketing” as a legitimate interest. Advocate General M. Bobek had stated in his opinion in the Fashion ID case (C-40/17) that no interest per se was excluded. In this sense, there was a decision of the Court of Justice that recognized a legitimate interest that did not correspond to a fundamental right or a principle of law (C-131/12, Google Spain). In addition, the Rechtbank Midden-Nederland (District Court of Midden- Nederland, the Netherlands) stated in a decision dated November 23, 2020, that a legitimate interest is established via a negative test.

Brief presentation of the rationale of the template

  • According to the referring court, the question of whether the plaintiff has a legitimate interest in processing the personal data of its members cannot be answered beyond reasonable doubt. Neither does the settled case law of the Court of Justice provide an answer to this question (there is no “acte éclairé”) nor does Art. 6 para. 1(f) GDPR clarifies the definition and scope of the term “legitimate interest” (there is no “acte clair”). Moreover, this provision is not formulated so clearly that there can be no doubt as to its interpretation and scope.
  • On the one hand, the referring court refers to the above-mentioned decision of the Rechtbank Midden-Nederland, in which reference is made to the opinion of Advocate General M. Bobek in the Fashion ID case. In that letter, he states that Directive 95/46 also contains neither a definition of the precise content of the concept of “legitimate interest” nor an enumeration thereof. In his opinion, this term is apparently quite elastic and open, no interest is excluded per se, provided that it is not illegal in itself, this term can encompass a wide variety of interests and therefore not only legal interests, but also quite a few factual, economic and ideal interests can constitute a legitimate interest. This seems to speak in favor of the plaintiff’s point of view, according to which any interest, consequently also a purely commercial interest, can be a legitimate interest. Furthermore, the referring court considers that the applicant’s view is also justifiable because the GDPR clearly prescribes when a processing operation must have a provision of law as its legal basis. On the other hand, according to the referring court, it seems difficult to reconcile the protection offered by the GDPR with the fact that the desire to make money from the personal data of data subjects without their consent is classified as a legitimate interest. In the view of the referring court, therefore, in the case of a fundamental right such as the right to protection of personal data, the defendant’s view is also justifiable. However, the referring court points out that even before the entry into force of the GDPR, the limitation of Article 8 ECHR was provided for by law. Indeed, the “legitimate interest” ground for processing was at that time provided for in Article 8(f) of the Wet bescherming persoonsgegevens (Personal Data Protection Act)
Marian Härtel
Author: Marian Härtel

Marian Härtel ist Rechtsanwalt und Fachanwalt für IT-Recht mit einer über 25-jährigen Erfahrung als Unternehmer und Berater in den Bereichen Games, E-Sport, Blockchain, SaaS und Künstliche Intelligenz. Seine Beratungsschwerpunkte umfassen neben dem IT-Recht insbesondere das Urheberrecht, Medienrecht sowie Wettbewerbsrecht. Er betreut schwerpunktmäßig Start-ups, Agenturen und Influencer, die er in strategischen Fragen, komplexen Vertragsangelegenheiten sowie bei Investitionsprojekten begleitet. Dabei zeichnet sich seine Beratung durch einen interdisziplinären Ansatz aus, der juristische Expertise und langjährige unternehmerische Erfahrung miteinander verbindet. Ziel seiner Tätigkeit ist stets, Mandanten praxisorientierte Lösungen anzubieten und rechtlich fundierte Unterstützung bei der Umsetzung innovativer Geschäftsmodelle zu gewährleisten.

Tags: Case lawGeneral Data Protection RegulationGoogleLawsLawsuitLegal questionPersonal dataPrivacyRegulationSponsor

Weitere spannende Blogposts

Agile development and fixed-price projects: Contractual challenges for IT service providers

Agile development and fixed-price projects: Contractual challenges for IT service providers
14. October 2024

The combination of agile software development and fixed-price projects presents IT service providers with particular contractual challenges. On the one...

Read moreDetails

Match Fixing in Esport: Legal Consequences?

Match Fixing in Esport: Legal Consequences?
12. September 2019

Time and again in esport, accusations arise in individual teams about match fixing, i.e. the deliberate loss of games in...

Read moreDetails

Data protection madness: when theory and practice collide

f317f7f3f7914aba4fccb4f129a8060c
26. June 2024

Data protection madness: when theory and practice collide I normally write very neutral, factual articles in my blog on various...

Read moreDetails

Federal government and esports: no own expert opinion on recognition as a sport

pexels photo 896851 1
7. November 2022

According to its own statement, the federal government has not commissioned any separate expert opinions on the issue of Esport...

Read moreDetails

Security deficiencies in online banking: A look at a recent ruling by the Heilbronn Regional Court and the legal situation

Security deficiencies in online banking: A look at a recent ruling by the Heilbronn Regional Court and the legal situation
11. October 2023

Introduction: Digital transformation has made online banking a popular and convenient way to manage finances. But as online transactions increase,...

Read moreDetails

Artificial intelligence in esports: legal challenges and solutions for fan engagement, game improvement and sponsorship.

Artificial intelligence in esports: legal challenges and solutions for fan engagement, game improvement and sponsorship.
9. June 2023

Introduction The rapid development of artificial intelligence (AI) is having a profound impact on various industries, and esports is no...

Read moreDetails

SEO and law – a balancing act between visibility and security

img LkyqWNCTGcprds9IuQPTVGz9
21. November 2023

As a lawyer specializing in IT law, copyright law and competition law, I face the challenges that arise at the...

Read moreDetails

Geoblocking Regulation: Apps and the like?

Geoblocking Ordinance: Attention Warning Trap
7. November 2022

Does the geoblocking regulation I reported on here actually apply to apps and/or computer games? And if so, under what...

Read moreDetails

No injunctive relief for violations of the GDPR? Frankfurt Higher Regional Court restricts rights of data subjects

District Court Frankfurt a.M. on the right to be forgotten
3. August 2023

In a landmark ruling dated March 30, 2023 (case number: 16 U 22/22), the Higher Regional Court of Frankfurt am...

Read moreDetails
Trade custom

Trade custom

1. July 2023

Introduction In business, there are certain behaviors and practices that are recognized and accepted over time. These practices are referred...

Read moreDetails
DPMA

Copyright

24. June 2023
kuenstlersozialkasse ksk und ksk abgabe

Artists’ Social Insurance Fund (KSK) and KSK levy

28. June 2023
Mediation

Mediation

16. October 2024
Joint venture

Joint venture

16. October 2024

Podcast Folgen

KI im Rechtssystem: Auf dem Weg in eine digitale Zukunft der Justiz

KI im Rechtssystem: Auf dem Weg in eine digitale Zukunft der Justiz

13. October 2024

In dieser faszinierenden Podcastfolge tauchen wir tief in die Welt der künstlichen Intelligenz (KI) und ihre Auswirkungen auf unser Rechtssystem...

Der IT Media Law Podcast. Folge Nr. 1: Worum geht es hier eigentlich?

Der IT Media Law Podcast. Folge Nr. 1: Worum geht es hier eigentlich?

26. August 2024

Yeah, die erste richtige Folge mit mir selbst! In diesem Podcast tauchen wir ein in die spannende Welt des IT-Rechts...

Web3, Blockchain und Recht – Eine kritische Bestandsaufnahme

Web3, Blockchain und Recht – Eine kritische Bestandsaufnahme

25. September 2024

  In dieser aufschlussreichen Episode des ITmedialaw-Podcasts wird ein tiefgehender Blick auf die Schnittstelle von Web3, Blockchain-Technologie und Recht geworfen....

“Digitales Recht Entschlüsselt” mit Rechtsanwalt Marian Härtel

“Digitales Recht Entschlüsselt” mit Rechtsanwalt Marian Härtel

25. September 2024

In diesem spannenden 30-minütigen Podcast entschlüsselt Rechtsanwalt Marian Härtel die komplexe Welt des digitalen Rechts für Selbstständige, Startups und Solopreneure....

  • Privacy policy
  • Imprint
  • Contact
  • About lawyer Marian Härtel
Marian Härtel, Rathenaustr. 58a, 14612 Falkensee, info@itmedialaw.com

Marian Härtel - Rechtsanwalt für IT-Recht, Medienrecht und Startups, mit einem Fokus auf innovative Geschäftsmodelle, Games, KI und Finanzierungsberatung.

Welcome Back!

Login to your account below

Forgotten Password? Sign Up

Create New Account!

Fill the forms below to register

All fields are required. Log In

Retrieve your password

Please enter your username or email address to reset your password.

Log In
  • Informationen
    • Ideal partner
    • About lawyer Marian Härtel
    • Quick and flexible access
    • Principles as a lawyer
    • Why a lawyer and business consultant?
    • Focus areas of attorney Marian Härtel
      • Focus on start-ups
      • Investment advice
      • Corporate law
      • Cryptocurrencies, Blockchain and Games
      • AI and SaaS
      • Streamers and influencers
      • Games and esports law
      • IT/IP Law
      • Law firm for GMBH,UG, GbR
      • Law firm for IT/IP and media law
    • The everyday life of an IT lawyer
    • How can I help clients?
    • Testimonials
    • Team: Saskia Härtel – WHO AM I?
    • Agile and lean law firm
    • Price overview
    • Various information
      • Terms
      • Privacy policy
      • Imprint
  • Services
    • Support and advice of agencies
    • Contract review and preparation
    • Games law consulting
    • Consulting for influencers and streamers
    • Advice in e-commerce
    • DLT and Blockchain consulting
    • Legal advice in corporate law: from incorporation to structuring
    • Legal compliance and expert opinions
    • Outsourcing – for companies or law firms
    • Booking as speaker
  • News
    • Gloss / Opinion
    • Law on the Internet
    • Online retail
    • Law and computer games
    • Law and Esport
    • Blockchain and web law
    • Data protection Law
    • Copyright
    • Labour law
    • Competition law
    • Corporate
    • EU law
    • Law on the protection of minors
    • Tax
    • Other
    • Internally
  • Podcast
    • ITMediaLaw Podcast
  • Knowledge base
    • Laws
    • Legal terms
    • Contract types
    • Clause types
    • Forms of financing
    • Legal means
    • Authorities
    • Company forms
    • Tax
    • Concepts
  • Videos
    • Information videos – about Marian Härtel
    • Videos – about me (Couch)
    • Blogpost – individual videos
    • Videos on services
    • Shorts
    • Podcast format
    • Third-party videos
    • Other videos
  • Contact
  • en English
  • de Deutsch
Kostenlose Kurzberatung