Personal data and their protection

Personal data includes any kind of information that allows to directly or indirectly identify a person: name, picture, fingerprints, family details, residence, job, etc. The law considers more sensitive data delicate (religious and political views, details about health and sexual life, etc.). A comprehensive list of delicate personal data is included in §4 of the Personal Data Protection Act .

The act gives a person the right to demand:

  • information on how and for what purpose data is being collected on him and how it is being used
  • correcting incorrect personal data
  • termination of the illegal collection, use, and publication of personal data.

Primarily, it is the person’s own responsibility to ensure the security of his data. If your rights have been violated and the violator does not react to your appeal, contact the Data Protection Inspectorate. If you demand compensation for the damage, an apology, and refutation, you need to appeal to a county court.
If the action may be a criminal offence, contact the police: for instance, identity theft, unauthorised surveillance, illegal observation, or the illegal publication of delicate personal data.