https://noyb.eu/en/german-credit-agency-earns-millions-through-unlawful-customer-manipulation Skip to main content noyb.eu noyb.eu logo [ ] [SUBMIT] Main navigation * News * Our work + Cases by Project + Cases by DPA + Cases by Company * Resources + GDPRhub + GDPRtoday + SecureDrop + Exercise your rights! * Support us! + Membership + Donations + Sponsorship + Traineeship + Member Login * About us + Concept + Team + Annual Reports + FAQs + Jobs + Media + Contact * en + English + Deutsch + Francais + Dutch + Greek + Espanol + Italiano + Polish + Finnish + Bulgarian [ ] Main navigation * News * Our work + Cases by Project + Cases by DPA + Cases by Company * Resources + GDPRhub + GDPRtoday + SecureDrop + Exercise your rights! * Support us! + Membership + Donations + Sponsorship + Traineeship + Member Login * About us + Concept + Team + Annual Reports + FAQs + Jobs + Media + Contact Footer * Legal, Open Source & Privacy * Translations * Media * Contact Breadcrumb 1. Home 2. News 3. German credit agency earns millions through unlawful customer manipulation German credit agency earns millions through unlawful customer manipulation Feb 16, 2024 SCHUFA Complaint German credit agency earns millions through unlawful customer manipulation Today, noyb has filed a complaint and report against the German credit agency SCHUFA with the Hessian data protection authority. The company appears to be making millions of euros by selling people in Germany their own data. With the help of manipulative designs, people are prevented from obtaining a free copy of their data in accordance with Article 15 GDPR - even though they would actually be legally entitled to it. The company's primary aim appears to be to profit from people looking for accommodation. In Germany, they often have to provide proof of solvency in order to obtain a lease. * Complaint and report against SCHUFA (DE) Lucrative business at the expense of apartment seekers. Anyone looking for a flat or house to rent in Germany is regularly asked to prove their financial reliability. As a result, people looking for accommodation often end up at credit agencies such as SCHUFA - which make a fortune by selling people in Germany their own data. What SCHUFA deliberately conceals: according to Article 15 GDPR, it would have to provide precisely this data free of charge and without delay. Concealed rights. On its own website, SCHUFA only advertises its so-called "BonitatsAuskunft" for EUR29.95 to private individuals and claims that it offers an "advantage on the housing market". A transparent reference to the Article 15 GDPR right to free information is not provided. Using manipulative designs, the company is trying to push the sale of paid products and even falsely presents the free information as unsuitable for submission to third parties. Martin Baumann, data protection lawyer at noyb: "SCHUFA is falsely claiming that only its paid products can be presented to third parties. In reality, the European Court of Justice has emphasised several times that data subjects are allowed to do whatever they want with their free information." "Data copy" instead of information. The vast majority of data subjects is unlikely to even find the free information. Although the GDPR stipulates that companies must support data subjects in obtaining their free information, SCHUFA does not even mention it by name. The company casually refers to the information in accordance with Article 15 GDPR as a "data copy". In fact, a range of further information needs to be included as well. At the same time, the legal term "information" in accordance with Article 15 is misused for the paid product (BonitatsAuskunft). Anyone who manages to find the hidden option to request the information free of charge is once again bombarded with adverts for the paid product. In addition, SCHUFA advises against sharing the free information with third parties. On the one hand, it supposedly contains sensitive data, but on the other hand "not an up-to-date calculation of your creditworthiness scores". Data is deliberately withheld. As a result, SCHUFA is violating European data protection law in several ways. The company doesn't take any measures to make it easy for data subjects to exercise their right of access to data, contrary to the clear requirements of the GDPR. Additionally, the company deliberately withholds information in order to be able to sell its paid product: For example, in the case of the complainant, the free information included only a "basic score", while the paid information showed six different "industry scores". Article 15 GDPR obliges the company to disclose all processed data in full. To make matters worse, the complainant received the paid product after five days, while the free information, which was ordered at the same time, took significantly longer. Here, too, the GDPR actually requires an "immediate" delivery. Martin Baumann, data protection lawyer at noyb: "The GDPR requires companies to make all data available immediately, transparently, easily accessible and free of charge. These requirements are in clear contradiction to the current business practice of selling people their own data." Complaint and report in Germany. noyb has therefore filed a complaint against SCHUFA with the Hessian data protection authority. By systematically hiding and delaying the free information and deliberately withholding data, the company is in breach of the GDPR. In addition, noyb is filing a report with the Hessian DPA. SCHUFA systematically violates the legal requirement of free information by creating the impression that only the paid products are suitable as proof to third parties. Related articles Recent articles CRIF/ACXIOM German DPA declares data trading between credit agency and address trader illegal Feb 05, 2024 noyb win in proceedings against the credit reference agency CRIF and the address trader Acxiom in Germany Read more KSV1870_Complaint_and_Report Creditors' association earns millions with (actually) cost-free GDPR rights Jan 04, 2024 KSV1870 uses misleading website designs to urge people to purchase a high-priced "InfoPass" instead of getting a free copy of their data Read more Project Credit Scoring Support us! noyb funding goal 76.1 % Invest in privacy! Follow us! * Facebook * Twitter * Youtube * LinkedIn * Instagram * Newsletter * Mastodon * RSS Media Coverage Politico Logo U.S. tech giant Meta has been hit with a record EUR1.2 billion fine for not complying with the EU's privacy rulebook. Read More Reuters Apple hits back at European activist complaints against tracking tool An Austrian privacy advocacy group drew a strongly critical response from Apple on Monday after it said an online tracking tool used in its devices breached European law. Read More FZ 101 Unternehmen leiten noch immer Daten an die USA weiter Der Datenschutz-Verein noyb brachte 101 Beschwerden gegen den Datentransfer in die USA ein. Read More zdf ZDF Magazin Royale vom 10. Dezember 2021 Expertentalk mit Datenschutzer und Facebookbezwinger Max Schrems Read More reuters Irish regulator proposes 36 mln euro Facebook privacy fine - document The complaint, lodged by Austrian privacy activist Max Schrems, concerned the lawfulness of Facebook's processing of personal data, specifically around its terms of service. Read more Footer menu * Legal, Open Source & Privacy * Translations * Media * Contact