Latvia / Supreme Court, Administrative Department / A420617410 (SKA –15/2016)

Ltd.”Europark Latvia” v Data State Inspectorate (Datu valsts inspekcija) and third party (anonymised)
Deciding body type
National Court/Tribunal
Deciding body
Department of Administrative Cases of Supreme Court
Typ
Decision
Decision date
04/08/2016
  • Latvia / Supreme Court, Administrative Department / A420617410 (SKA –15/2016)

    Key facts of the case:

    A vehicle belonging to a third party was parked at a parking place belonging to an applicant ltd. “Europark Latvia”. The third party did not pay for parking place. Thereby the applicant issued a penalty receipt to the vehicle belonging to the third party. A debt recovery company of the applicant (with help of a sworn attorney within a contractual relation) obtained personal data information about the owner of the car from the Road Traffic Safety Directorate. The third party submitted a complaint to the Data State Inspectorate about wrongful personal data processing (the vehicle was given to another person and this person had parked the vehicle and did not pay for it, not the owner of the vehicle). The Data State Inspectorate imposed a duty on the applicant to cease the personal data processing of the third party for the recovery of penalty. The applicant appealed the decision of the inspectorate incourt. The Administrative Regional Court accepted the application and revoked the appealed decision.

    The court of the first instance concluded that since the rules of the applicant provide for the  right of the applicant to direct a recovery against the owner of the vehicle, the turning  of the applicant to the Road Traffic Safety Directorate for information about the owner of the vecihle conforms to Article  7 and Artcile  10 (1) 1), 2) of the Personal Data Protection Law.

    The Data State Inspecorate submitted a cassation complaint.

    Outcome of the case:

    The Department of Administrative Cases of Supreme Court pointed that according to the Article  96 of the Constitution of the Republic of Latvia everyone has the right to inviolability of his or her private life, home and correspondence. The right to inviolability of his or her private life is included in the Article  8 of the Convention for the Protection of Human Rights and Fundamental Freedoms and in Article  7 and Article  8 of the Charter of Fundamental Rights of the European Union.

    The right to inviolability of his or her private life includes a person’s right to any kind of his or her data protection (see the Supreme Court 26 March 2015 judgment in case No.SKA-383/2005, article 9; 25 June 2015 judgment in case No.SKA-864/2015, article 6). According to the Section 6 of the Personal Data Protection Law every natural person has the right to protection of his or her personal data. Personal data are any information related to an identified or identifiable natural person. A name and surmane of a person together with a personal identity number and an address of the place of residence is definitely considered as an information related to  an identifiable person (6.11.2003. judgment of European Union Court, case No. C-101/01, article 24), therefore in processing personal data the requirements of Personal Data Protection Law shall be respected.

    The processing of personal data is permissible, if it is justified with a ground mentioned in the Section 7 of the Data Protection Law and conforms with the quality requirements of data processing, is legal and fair, is carried out in accordance with the intended purpose and does not exceed the amount required to achieve the target.

    The owner of the vehicle has notproved that another person was using his vehicle, therefore the fact that the vehicle has been given for the use to another person is known only by the third party himself. Until proven otherwise, it is considered that the vehicle is used by its owner. Thereby it is presumed that the vehicle at a given time is used and placed in  the parking place by the owner.

    The court concluded that the Regional court had correctly interpreted the Section 7 2) of the Personal Data Protection Law, namely, in particular case the processing of data results from contractual obligations of the data subject.

    The Department of Administrative Cases of Supreme Court decided to leave the judgment of court of first instance unamended and to reject the cassation complaint.

  • Paragraphs referring to EU Charter

    [6] Accordingly to the Article 96 of Constitution of Republic of Latvia everyone has the right to inviolability of his or her private life, home and correspondence. The right to inviolability of his or her private life is included in the Article  8 of the European Convention for the Protection of Human Rights and Fundamental Freedoms and in Article  7 and Article  8 of the Charter of Fundamental Rights of the European Union.

    The right to inviolability of his or her private life includes a person’s right on any kind of its data protection (see 26 March 2015 judgment of Supreme Court case No.SKA-383/2015 paragraph 9, 25 June 2015 judgment in case No.SKA-864/2015 paragraph 6).

    Personal data protection is regulated by the Personal Data Protection Law. The Law anticipates that every natural person has the right to protection of his or her personal data (Section 6). Personal data is any information related to an identified or identifiable natural person (Section 2, clause 3). A name and surname of a person together with a personal identity number and an address of the place of residence is definitely considered as information relating to an identifiable person (see 6 November 2003 judment of European Union Cort in case No.C-101/01 paragraph 24), thereby in processing such data the requirements of Personal Data Protection Law must be complied.

  • Paragraphs referring to EU Charter (original language)

    [6] Saskaņā ar Latvijas Republikas Satversmes 96.pantu ikvienam ir tiesības uz privātās dzīves, mājokļa un korespondences neaizskaramību. Tiesības uz privātās dzīves neaizskaramību ietvertas arī Eiropas Cilvēka tiesību un pamatbrīvību aizsardzības konvencijas 8.pantā un Eiropas Savienības Pamattiesību hartas 7. un 8.pantā.

    Tiesības uz privātās dzīves neaizskaramību ietver personas tiesības uz jebkuru savu datu aizsardzību (sk. Augstākās tiesas 2015.gada 26.marta sprieduma lietā Nr.SKA-383/2015 9.punktu, 2015.gada 25.jūnija sprieduma lietā Nr.SKA-864/2015 6.punktu).

    Personas datu aizsardzību reglamentē Fizisko personu datu aizsardzības likums. Likumā ir noteikts, ka ikvienai fiziskajai personai ir tiesības uz savu personas datu aizsardzību (6.pants). Personas dati ir jebkāda informācija, kas attiecas uz identificētu vai identificējamu fizisko personu (2.panta 3.punkts). Personas vārds un uzvārds kopā ar personas kodu un dzīvesvietas adresi ir noteikti uzskatāma par informāciju, kas attiecas uz identificējamu  personu (sal. Eiropas Savienības Tiesas 2003.gada 6.novembra sprieduma lietā C-101/01 24.punkts), tādēļ to apstrādē ir ievērojamas Fizisko personu datu aizsardzības likuma prasības.