Case Law · Court of Justice of the European Union EN LLM context A cited markdown file you can paste into your AI assistant (ChatGPT, Claude, a RAG or project knowledge base) to ground it in this document. Contains: this document’s text, its sections with their topics, and the full text of every law provision it applies. Everything links back to its source on overview.legal — legal information, not advice.
Judgment
Full text
The referring court considers that the operations challenged by the applicant in the main proceedings come within the scope of the GDPR. It states that those operations constitute ‘processing’ of ‘personal data’ of the ‘data subject’ and that Quirin Privatbank is the ‘controller’, within the meaning of Article 4(1), (2) and (7) of that regulation. According to the referring court, it is common ground that those operations, which took the form of an unauthorised transmission of such data to a ‘third party’, within the meaning of Article 4(10) of the GDPR, infringed provisions of that regulation and are unlawful under Article 6(1) thereof, in particular because the applicant in the main proceedings had not consented to them.