DSB Cases
-
Case 6 – Right of Access and an Unexplained Marketing Data Chain
Status: Proceedings before the Austrian Data Protection AuthorityInitial events: April 2026Relevant GDPR provisions: Articles 12–15 GDPRMain issue: Personal data, an apparent opt-in and campaign interactions were attributed to me within a multi-party marketing chain that I did not knowingly initiate. In April 2026, I received an unsolicited marketing email at my professional email address concerning…
-
Case 5 – Right of Access Concerning the Source and Disclosure of a Private Telephone Number
Status: Pending before the Austrian Data Protection AuthorityYear: 2026Relevant GDPR provisions: Articles 12, 14 and 15 GDPRMain issue: Source, legal basis and onward disclosure of a private telephone number This case concerns the processing of my private telephone number within the business-contact and data-enrichment ecosystem. The number is particularly significant because, unlike a professional email…
-
Case 4 – Right of Access Concerning the Source of an Unsolicited Conference Invitation (2026)
Background On 6 February 2026, I received an unsolicited professional email at my work email address inviting me to attend a conference on conversational AI and customer experience in Munich. The message was sent by a marketing representative of an event-organising company. The issue was not the conference invitation itself. My concern was that I…
-
Case 3 – Right of access concerning a work email address (2026)
In February 2026, I received an unsolicited marketing email at my work email address promoting scientific products relating to cancer research. Since my work email address was not publicly available and I had no professional activity relating to the advertised products, I asked the sender to explain how my contact details had been obtained and…
-
Case 2 – Right of access concerning a non-public work email address (2026)
In January 2026, I received an unsolicited business email at my work email address. Unlike several previous cases involving my private email address,this communication was sent to a work email address that, to my knowledge,was not publicly available. Since I did not know how the address had been obtained,I asked the sender to explain the…
-
Case 1 – Right to confidentiality of my private telephone number (2024)
In June 2024, shortly before the end of my employment at the University of Natural Resources and Life Sciences, Vienna (BOKU) https://boku.ac.at/, I became aware that my private mobile telephone number had been forwarded to another member of my research group without my prior knowledge or consent. I was subsequently contacted via Telegram regarding my…