• Mehr als 3 Millionen Wörter Inhalt
  • |
  • info@itmedialaw.com
  • |
  • Tel: 03322 5078053
Rechtsanwalt Marian Härtel - ITMediaLaw

No products in the cart.

  • en English
  • de Deutsch
  • Informationen
    • Ideal partner
    • About lawyer Marian Härtel
    • Quick and flexible access
    • Principles as a lawyer
    • Why a lawyer and business consultant?
    • Focus areas of attorney Marian Härtel
      • Focus on start-ups
      • Investment advice
      • Corporate law
      • Cryptocurrencies, Blockchain and Games
      • AI and SaaS
      • Streamers and influencers
      • Games and esports law
      • IT/IP Law
      • Law firm for GMBH,UG, GbR
      • Law firm for IT/IP and media law
    • The everyday life of an IT lawyer
    • How can I help clients?
    • Testimonials
    • Team: Saskia Härtel – WHO AM I?
    • Agile and lean law firm
    • Price overview
    • Various information
      • Terms
      • Privacy policy
      • Imprint
  • Services
    • Support and advice of agencies
    • Contract review and preparation
    • Games law consulting
    • Consulting for influencers and streamers
    • Advice in e-commerce
    • DLT and Blockchain consulting
    • Legal advice in corporate law: from incorporation to structuring
    • Legal compliance and expert opinions
    • Outsourcing – for companies or law firms
    • Booking as speaker
  • News
    • Gloss / Opinion
    • Law on the Internet
    • Online retail
    • Law and computer games
    • Law and Esport
    • Blockchain and web law
    • Data protection Law
    • Copyright
    • Labour law
    • Competition law
    • Corporate
    • EU law
    • Law on the protection of minors
    • Tax
    • Other
    • Internally
  • Podcast
    • ITMediaLaw Podcast
  • Knowledge base
    • Laws
    • Legal terms
    • Contract types
    • Clause types
    • Forms of financing
    • Legal means
    • Authorities
    • Company forms
    • Tax
    • Concepts
  • Videos
    • Information videos – about Marian Härtel
    • Videos – about me (Couch)
    • Blogpost – individual videos
    • Videos on services
    • Shorts
    • Podcast format
    • Third-party videos
    • Other videos
  • Contact
Kurzberatung
  • Informationen
    • Ideal partner
    • About lawyer Marian Härtel
    • Quick and flexible access
    • Principles as a lawyer
    • Why a lawyer and business consultant?
    • Focus areas of attorney Marian Härtel
      • Focus on start-ups
      • Investment advice
      • Corporate law
      • Cryptocurrencies, Blockchain and Games
      • AI and SaaS
      • Streamers and influencers
      • Games and esports law
      • IT/IP Law
      • Law firm for GMBH,UG, GbR
      • Law firm for IT/IP and media law
    • The everyday life of an IT lawyer
    • How can I help clients?
    • Testimonials
    • Team: Saskia Härtel – WHO AM I?
    • Agile and lean law firm
    • Price overview
    • Various information
      • Terms
      • Privacy policy
      • Imprint
  • Services
    • Support and advice of agencies
    • Contract review and preparation
    • Games law consulting
    • Consulting for influencers and streamers
    • Advice in e-commerce
    • DLT and Blockchain consulting
    • Legal advice in corporate law: from incorporation to structuring
    • Legal compliance and expert opinions
    • Outsourcing – for companies or law firms
    • Booking as speaker
  • News
    • Gloss / Opinion
    • Law on the Internet
    • Online retail
    • Law and computer games
    • Law and Esport
    • Blockchain and web law
    • Data protection Law
    • Copyright
    • Labour law
    • Competition law
    • Corporate
    • EU law
    • Law on the protection of minors
    • Tax
    • Other
    • Internally
  • Podcast
    • ITMediaLaw Podcast
  • Knowledge base
    • Laws
    • Legal terms
    • Contract types
    • Clause types
    • Forms of financing
    • Legal means
    • Authorities
    • Company forms
    • Tax
    • Concepts
  • Videos
    • Information videos – about Marian Härtel
    • Videos – about me (Couch)
    • Blogpost – individual videos
    • Videos on services
    • Shorts
    • Podcast format
    • Third-party videos
    • Other videos
  • Contact
Rechtsanwalt Marian Härtel - ITMediaLaw

OLG rejects DSGVO claims due to scraping at Facebook

7. September 2023
in Data protection Law
Reading Time: 4 mins read
0 0
A A
0
dsgvo 3589608 1280
Key Facts
  • Hamm Higher Regional Court dismisses claim for damages under GDPR; immaterial damage insufficiently demonstrated
  • Data of 500 million Facebook users published on the darknet; allegation of scraping by unknown persons.
  • Plaintiff claimed 1,000 euros in damages for non-material damage in connection with Meta.
  • Higher Regional Court finds that Meta violated GDPR, but could not prove immaterial damages
  • Illegal processing of the cell phone number without effective consent was detected.
  • Court recognizes breach of duty, but no compensation; psychological impairments were not sufficiently proven.
  • The amount in dispute for the proceedings was estimated at EUR 3,000; an appeal was not permitted.

Things are not going well for law firms that have collected masses of alleged clients for DSGVO claims against Facebook. This is because the Higher Regional Court of Hamm has issued its first ruling on the so-called Facebook scraping cases and dismissed a claim for payment of damages under the General Data Protection Regulation(GDPR). According to the ruling, there have been violations of data protection regulations, but the plaintiff was unable to sufficiently demonstrate non-material damage.

In April 2021, unknown persons published the data of about 500 million Facebook users on the darknet, including names and phone numbers. The unknown persons had previously collected the data over a longer period of time, initially by exploiting Facebook’s search functions at the time, which is why the term “scraping” is used. Even if the display of one’s own phone number was not activated on Facebook, it was possible to identify a user via an entered phone number using the search function. The unknown “scrapers” exploited this by generating millions of telephone numbers with the computer and retrieving data for this purpose. Facebook disabled the phone number search feature in April 2018. A subsequent customized scraping process that exploited Facebook’s contact import feature was followed by further data grabs until Facebook also disabled this feature on the platform in October 2018 and on Facebook Messenger in September 2019.

With regard to this “data leak”, numerous lawsuits are pending against Meta as the operator of the platform throughout Germany, including in the district of the Higher Regional Court of Hamm, for which the first decision has now been issued. In it, the 7th Civil Senate, which is responsible for the law of torts, clarifies numerous legal issues in connection with the scraping lawsuits.

The plaintiff in the case that has now been decided was also affected by the scraping. The record published on the darknet included her cell phone number, first and last name, and gender information. The plaintiff has demanded compensation from Meta as operator of the platform for immaterial damages similar to damages for pain and suffering in the amount of at least 1,000 euros, among other things. It took the view that the operator of the platform had violated various data protection provisions from the GDPR both in connection with the scraping and independently of it. Meta has countered this.

The Bielefeld Regional Court had rejected the claim. The appeal filed by the plaintiff has now been unsuccessful before the Higher Regional Court of Hamm. It is true that the Higher Regional Court found violations of the GDPR. However, it was not convinced that the plaintiff had suffered any non-material damage.

With regard to the identified violations of the GDPR, the Higher Regional Court starts from the premise that it is also the task of the data controller – in this case Meta – in civil proceedings to prove that the processing of such data is permissible under the GDPR. The transfer of data to third parties on a search function or a contact import function is also data processing in the sense of the GDPR. Meta was unable to demonstrate here that the disclosure of the plaintiff’s cell phone number as part of the search or contact import function was justified under the GDPR. Meta cannot rely on the fulfillment of the contractual purpose as a justification ground under the GDPR, since the processing of the cell phone number is not absolutely necessary for the networking of Facebook users with each other, taking into account the principle of data minimization. The processing of the cell phone number therefore requires the consent of the user. Such consent was not validly granted in this case, because the consent granted to the plaintiff at the time used default settings that could be deselected by the user if desired (“opt-out”) and the information about the search and contact import function was inadequate and non-transparent.

The Higher Regional Court also affirmed a breach of duty leading to damages in principle, since Meta had not taken obvious measures to prevent further unauthorized data access despite concrete knowledge of the data access in the present case.

Nevertheless, the Higher Regional Court did not award the plaintiff any damages. The plaintiff here has only claimed non-material damages, which is possible in principle under the GDPR and can lead to compensation similar to damages for pain and suffering. However, the plaintiff has not succeeded in demonstrating concrete non-material damage. In doing so, the Higher Regional Court assumes that the immaterial damage cannot lie in the mere violation of the GDPR itself, but that personal or psychological impairments going beyond this must have occurred. However, the plaintiff has not presented such individually. The blanket statement, identical to a large number of similar proceedings, that the “plaintiff party” had developed feelings of a loss of control, of being watched and of helplessness, i.e. an overall feeling of fear, and had expended time and effort, is not sufficient to demonstrate that the plaintiff was concretely and individually affected. Nor is the misuse of data at issue here, which led to the unintentional publication of the name and cell phone number, so serious that the occurrence of non-material damage is readily apparent. In addition, the plaintiff had only stated in her personal hearing before the district court that she had suffered a “feeling of fright”.

The Higher Regional Court assessed the amount in dispute for the entire proceedings – in which further claims for declaratory judgment, injunctive relief and information had also been asserted unsuccessfully – at only EUR 3,000. It saw no reason to refer the proceedings to the European Court of Justice for a preliminary ruling or to allow an appeal, as the decisive legal questions had recently been clarified by the European Court of Justice.

Marian Härtel
Author: Marian Härtel

Marian Härtel ist Rechtsanwalt und Fachanwalt für IT-Recht mit einer über 25-jährigen Erfahrung als Unternehmer und Berater in den Bereichen Games, E-Sport, Blockchain, SaaS und Künstliche Intelligenz. Seine Beratungsschwerpunkte umfassen neben dem IT-Recht insbesondere das Urheberrecht, Medienrecht sowie Wettbewerbsrecht. Er betreut schwerpunktmäßig Start-ups, Agenturen und Influencer, die er in strategischen Fragen, komplexen Vertragsangelegenheiten sowie bei Investitionsprojekten begleitet. Dabei zeichnet sich seine Beratung durch einen interdisziplinären Ansatz aus, der juristische Expertise und langjährige unternehmerische Erfahrung miteinander verbindet. Ziel seiner Tätigkeit ist stets, Mandanten praxisorientierte Lösungen anzubieten und rechtlich fundierte Unterstützung bei der Umsetzung innovativer Geschäftsmodelle zu gewährleisten.

Tags: FacebookGDPRPrivacy

Weitere spannende Blogposts

Small summary – Blizzard vs. Bossland

Small summary – Blizzard vs. Bossland
1. January 2018

This is an archive post of a blog article from before 2018, from the website www.rahaertel.com. The set date does...

Read moreDetails

Asset deal vs. share deal: Data protection implications of company acquisitions

Asset deal vs. share deal: Data protection implications of company acquisitions
10. October 2024

There are basically two options available to buyers when acquiring companies: the asset deal and the share deal. This distinction...

Read moreDetails

Artificial intelligence in esports: legal challenges and solutions for fan engagement, game improvement and sponsorship.

Artificial intelligence in esports: legal challenges and solutions for fan engagement, game improvement and sponsorship.
9. June 2023

Introduction The rapid development of artificial intelligence (AI) is having a profound impact on various industries, and esports is no...

Read moreDetails

When can I avoid the cookie banner?

ECJ: Cookies require explicit consent of users
18. October 2019

The ECJ has just ruled on the subject of cookies in the Planet49 case(see this article). Because of this procedure...

Read moreDetails

BGH decides on delisting request against Google

BGH considers Uber Black to be anti-competitive
11. April 2023

The VI. Civil Senate of the Federal Court of Justice, which is responsible for claims under the EU General Data...

Read moreDetails

Unsuccessful constitutional complaint against obligation to transmit IP addresses

Court case via internet chat
7. November 2022

It does not violate the German Basic Law that the provider of an e-mail service is obliged, in the context...

Read moreDetails

Munich District Court rejects media privilege at Jameda

Munich District Court rejects media privilege at Jameda
9. December 2019

The medical platform Jameda is currently under a lot of legal fire, but therefore provides legally valuable information for platform...

Read moreDetails

Data protection ruling: Important information for craftsmen and service providers on contact forms

Data protection ruling: Important information for craftsmen and service providers on contact forms
24. May 2023

Core of the judgment In a remarkable ruling, with the file number 17 O 125/23, the Regional Court of Cologne...

Read moreDetails

Caution when forwarding business e-mails to private addresses

District Court Frankfurt a.M. on the right to be forgotten
24. September 2024

The Munich Higher Regional Court clarified in its ruling of 31.07.2024 under file number 7 U 351/23 that forwarding work...

Read moreDetails
Contractual regulations for no-code/low-code software development
Other

Contractual regulations for no-code/low-code software development

21. May 2025

No-code and low-code platforms enable rapid software development without extensive manual programming. Applications are increasingly being developed on the basis...

Read moreDetails
Erotic content on OnlyFans: Copyright and personality rights protection for creators

Erotic content on OnlyFans: Copyright and personality rights protection for creators

20. May 2025
Goodbye hustle culture? Startup life between 24/7 grind and work-life balance

Goodbye hustle culture? Startup life between 24/7 grind and work-life balance

19. May 2025
Startup buzzwords 2025: Bullshit bingo in marketing German Introduction: Bullshit bingo in marketing German

Startup buzzwords 2025: Bullshit bingo in marketing German Introduction: Bullshit bingo in marketing German

18. May 2025
From the metaverse boom to AI euphoria – a tech lawyer in the hype cycle

From the metaverse boom to AI euphoria – a tech lawyer in the hype cycle

17. May 2025

Podcastfolge

052c2ca5ca0421f0316b42073ce61791

Innovative business models – risk and opportunity at the same time

10. September 2024

In this exciting episode of our podcast, we take a deep dive into the world of innovative business models. Our...

Read moreDetails
86fe194b0c4a43e7aef2a4773b88c2c4

On the dark side? A lawyer in the field of tension of innovative start-ups

26. September 2024
Looking to the future: How technology is changing the law

Looking to the future: How technology is changing the law

18. February 2025
247f58c28882e230e982fa3a32d34dea

Digital sovereignty: Europe’s path to a self-determined digital future

8. December 2024
8ffe8f2a4228de20d20238899b3d922e

Web3, blockchain and law – a critical review

26. September 2024

Video

My transparent billing

My transparent billing

10. February 2025

In this video, I talk a bit about transparent billing and how I communicate what it costs to work with...

Read moreDetails
Fascination between law and technology

Fascination between law and technology

10. February 2025
My two biggest challenges are?

My two biggest challenges are?

10. February 2025
What really makes me happy

What really makes me happy

10. February 2025
What I love about my job!

What I love about my job!

10. February 2025
  • Privacy policy
  • Imprint
  • Contact
  • About lawyer Marian Härtel
Marian Härtel, Rathenaustr. 58a, 14612 Falkensee, info@itmedialaw.com

Marian Härtel - Rechtsanwalt für IT-Recht, Medienrecht und Startups, mit einem Fokus auf innovative Geschäftsmodelle, Games, KI und Finanzierungsberatung.

Welcome Back!

Login to your account below

Forgotten Password? Sign Up

Create New Account!

Fill the forms below to register

All fields are required. Log In

Retrieve your password

Please enter your username or email address to reset your password.

Log In
  • Informationen
    • Ideal partner
    • About lawyer Marian Härtel
    • Quick and flexible access
    • Principles as a lawyer
    • Why a lawyer and business consultant?
    • Focus areas of attorney Marian Härtel
      • Focus on start-ups
      • Investment advice
      • Corporate law
      • Cryptocurrencies, Blockchain and Games
      • AI and SaaS
      • Streamers and influencers
      • Games and esports law
      • IT/IP Law
      • Law firm for GMBH,UG, GbR
      • Law firm for IT/IP and media law
    • The everyday life of an IT lawyer
    • How can I help clients?
    • Testimonials
    • Team: Saskia Härtel – WHO AM I?
    • Agile and lean law firm
    • Price overview
    • Various information
      • Terms
      • Privacy policy
      • Imprint
  • Services
    • Support and advice of agencies
    • Contract review and preparation
    • Games law consulting
    • Consulting for influencers and streamers
    • Advice in e-commerce
    • DLT and Blockchain consulting
    • Legal advice in corporate law: from incorporation to structuring
    • Legal compliance and expert opinions
    • Outsourcing – for companies or law firms
    • Booking as speaker
  • News
    • Gloss / Opinion
    • Law on the Internet
    • Online retail
    • Law and computer games
    • Law and Esport
    • Blockchain and web law
    • Data protection Law
    • Copyright
    • Labour law
    • Competition law
    • Corporate
    • EU law
    • Law on the protection of minors
    • Tax
    • Other
    • Internally
  • Podcast
    • ITMediaLaw Podcast
  • Knowledge base
    • Laws
    • Legal terms
    • Contract types
    • Clause types
    • Forms of financing
    • Legal means
    • Authorities
    • Company forms
    • Tax
    • Concepts
  • Videos
    • Information videos – about Marian Härtel
    • Videos – about me (Couch)
    • Blogpost – individual videos
    • Videos on services
    • Shorts
    • Podcast format
    • Third-party videos
    • Other videos
  • Contact
  • en English
  • de Deutsch
Kostenlose Kurzberatung