overview.legal
More
TopicsLawsCase lawEnforcementGuidanceNews

More sources

Literature Academic articles and books Tools Templates, checklists, calculators

Overviews

This week Everything added in the last 7 days Enforcement dashboard Fines by country, authority and article Coverage What the collection holds, and how current

Work with it

Transit Your processing register as a metro map API & AI tools REST, MCP server, context files Alerts & account Follow topics, get digests
About overview.legal Classic layout
News·noyb - European Center for Digital RightsEN
Export

German credit agency earns millions through unlawful customer manipulation

This item is a copy of:German credit agency earns millions through unlawful customer manipulation

Credit Scoring Today, noyb has filed a complaint and report against the German credit agency SCHUFA with the Hessian data protection authority.

Right of Access ProceduresSupervisory Authorities
Feb 16, 2024Sourcenoyb.eu

Full text

Credit Scoring Today, noyb has filed a complaint and report against the German credit agency SCHUFA with the Hessian data protection authority. The company appears to be making millions of euros by selling people in Germany their own data. With the help of manipulative designs, people are prevented from obtaining a free copy of their data in accordance with Article 15 GDPR – even though they would actually be legally entitled to it. The company’s primary aim appears to be to profit from people looking for accommodation. In Germany, they often have to provide proof of solvency in order to obtain a lease. Complaint and report against SCHUFA (DE)Lucrative business at the expense of apartment seekers. Anyone looking for a flat or house to rent in Germany is regularly asked to prove their financial reliability. As a result, people looking for accommodation often end up at credit agencies such as SCHUFA – which make a fortune by selling people in Germany their own data. What SCHUFA deliberat

How it connects

Related across sources

€100,000 HDPA fines Teleperformance for failing to properly handle employee access request The DPA received a complaint from a former employee of the Service 800 Teleperformance Single Member S.A. (the controller), after the controller failed to comply with the data… Greece ·Art. 5, 12, 13 +3 Personal Data Right of Access Storage Limitation
W101 2326836-1 40 natural persons submitted access requests to a mobile communications provider (controller) via an attorney Some of these persons were (former) customers of the controller, others have never been in a contractual relationship with the controller. In the access requests, the data… BVwG - W101 2326836-1 ·Federal Administrative Court Oct 2, 2026 Personal Data Right of Access Right to Restriction
Danish DPA finds employer unlawfully refused former employee's access request The DPA received a complaint from a former employee (data subject) of the controller concerning the refusal of an access request. More specifically, the data subject was dismissed… 2025-31-2078 ·Denmark ·Datatilsynet (DK) Sep 24, 2026 Right of Access Personal Data Supervisory Authorities
C/09/697386 / HA ZA 26-52 Den Haag District Court: 51 gamblers sue Unibet operator Risepoint over unanswered GDPR The District Court of The Hague (the Court) considered an action brought by 51 individuals who had participated in online gambling offered through the website Unibet before 1… Rb. Den Haag Sep 2, 2026 Right of Access Personal Data Data Portability
200.361.079/01 Court of Appeal Den Haag: gambling operator must disclose transaction data under Art. 15 The data subject submitted an access request, in electronic format, of his gambling data to Risepoint Limited (the controller), the operator of online gambling services in the… Sep 29, 2026 Personal Data Data Portability Right of Access
RON 5,242 Spitalul Veterinar Tineretului SRL A data subject filed an access request with the veterinary clinic Spitalul Veterinar Tineretului SRL (controller) concerning copies of a telephone conversation and video… Romania ·ANSPDCP ·Art. 15 Oct 13, 2026 Personal Data Right of Access Controllers
Related documents