What can you do if personal data causes problems?

Loan rejected: Which data can I check?

A loan rejection does not automatically prove a negative KSV or CRIF entry. The bank may take different information and criteria into account.

Internal bank notes: information and correction

Personal internal customer notes can also be the subject of a request for information. Limits, such as the rights of third parties, remain to be observed.

Bank account rejected: Here's what to do

If the opening of a bank account is refused, data protection issues and any rights to a basic account should be kept separate.

Overdraft or credit line rejected

A denied overdraft may be related to internal policies, performance or data sources; a negative entry is not automatically proven.

Loan after personal bankruptcy: check data first

After a private bankruptcy has ended, judicial publications and credit agency data must be viewed separately. A new loan approval is not guaranteed.

Automated credit decision: What rights exist?

If an application was assessed exclusively automatically, additional information rights and protection regulations according to Art. 22 GDPR may be relevant.

Credit rating & credit agencies

All 8 articles ›

KSV1870 information according to GDPR: free way

KSV1870 has its own official access to information in accordance with Art. 15 GDPR. A paid InfoPass is to be distinguished from this.

CRIF self-disclosure in Austria: instructions

The CRIF self-disclosure in accordance with Art. 15 GDPR is offered by the company free of charge. The result must be assessed separately from bank notes.

Negative credit rating: Check first, then act

A suspected negative KSV/CRIF entry is not yet a confirmed fact. The first step is reliable data information.

When is a negative entry deleted?

The storage period depends on the type of data, purpose, legal basis and individual case. A fixed deletion date cannot be promised across the board.

Claim paid but still reported as open

A settled claim that still appears to be outstanding may be factually incorrect. The exact content of the message is decisive.

Incorrect person or address on credit report

Same names, outdated addresses and assignment errors can have significant consequences. It is important to precisely identify the affected data set.

Understanding your credit score: Which data counts?

A score is not a single fault. It can be based on an assessment process through which those affected can request information in accordance with the GDPR.

KSV and CRIF: Why two pieces of information can be useful

KSV1870 and CRIF are different companies with independent data processing. Information from just one location does not necessarily show all the information from the others.

Personal bankruptcy

All 6 articles ›

Personal bankruptcy ended: What data remains?

Once proceedings have been completed, court publications and private credit data may have different storage rules.

Search insolvency file: Find file number and court

The public edict file of the Austrian judiciary makes it possible to search for insolvency proceedings that require publication.

Payment plan fulfilled: End public viewing?

Section 256 Paragraph 3 IO provides for the possibility, under certain conditions, of no longer granting access upon request after a legally confirmed payment plan has been fulfilled.

How long is bankruptcy visible in the insolvency file?

The legal duration of inspection depends on the specific type of procedure and the times specified in Section 256 IO.

debt discharge procedure (Abschöpfungsverfahren) ended: check data

After the end or discontinuation of a debt discharge procedure (Abschöpfungsverfahren), judicial inspection and data from credit agencies should be checked separately.

Court order or bankruptcy documents are missing

Without a correct decision, neither the type of procedure nor a relevant deadline for inspection can be reliably determined.

Mobile communications & insurance

All 6 articles ›

Cell phone contract rejected: check data sources

If the mobile phone contract is rejected, your own contract data and possibly data from credit agencies may be involved. The actual cause is initially unclear.

Old mobile phone claim: Is the entry correct?

For a previous telephone bill, the reported status may differ from a payment or a complaint. Written information creates the basis.

High insurance premium: Check saved risk data

An unexpectedly high premium can have various causes. With a data protection request, personal risk data can be checked, but tariffs cannot be changed automatically.

Insurance rejected: What data is used?

If an insurance application is refused, data protection rights and contractual risk assessment must be separated.

Correct incorrect insurance information

Incorrect personal information provided to an insurer can lead to incorrect assignments and misunderstandings. The correction must relate to the actual error.

Debt collection companies: What data is processed?

Debt collection agencies can process personal data relating to receivables. A request for this data is not the same as disputing the claim.

Privacy Rights

All 9 articles ›

GDPR information according to Art. 15: step by step

In principle, you can find out whether and which personal data a person responsible is processing about you. The application is usually free.

GDPR correction according to Art. 16: Correct errors

Incorrect personal data can generally be corrected and incomplete data can be supplemented if necessary. The error should be named in a comprehensible manner.

GDPR deletion according to Art. 17: Requirements and limits

A right to deletion only exists under certain legal conditions and cannot be equated with a general deletion of all data.

GDPR objection according to Art. 21: What is possible?

On certain legal bases, an objection based on a particular personal situation is possible. More extensive rules apply to direct advertising.

Who received my data? Ask the recipient

In principle, a request for information can also include information about recipients of personal data. The actual recipients must be determined by the responsible company.

Ask for storage duration: When will data be deleted?

Many affected people primarily want to know when information disappears. The GDPR provides information on the planned storage period or its determination criteria.

No response to GDPR information: what to do?

If requests for information are ignored, receipt, deadline and possible extensions should first be tracked.

Prepare a complaint to the data protection authority

If the rights of those affected are not fulfilled, a complaint to the Austrian data protection authority may be considered.

GDPR information free of charge: How much does an external service cost?

The statutory right to information is generally free of charge. A private service may offer clearly defined additional preparation services.

Other everyday situations

All 11 articles ›

Check old customer data after the contract ends

After the contract ends, companies may still lawfully need certain data. Other data may have become unnecessary.

Unwanted advertising: Use data protection objection

When processing personal data for the purpose of direct advertising, you generally have the right to object at any time.

Data leak suspected: What steps can help now

After a suspected data breach, account protection and specific information about the incident should first be secured.

Identity abuse suspected: determine the data situation

Third-party contracts or unknown claims can be indications of misuse of personal data.

Apartment application rejected: Which data was checked?

Personal data can also be processed when looking for an apartment. The reason for rejection and data protection information must be considered separately.

Applicant data with the employer: information and storage

Even unsuccessful applications may contain personal data. Storage duration and rights depend on the specific processing context.

Online customer account blocked: data and basis for decision-making

When an account is suspended, a platform may use personal data related to security, contract usage, and possible violations.

Have old Google search results for your person removed?

Some search results point to old or inaccurate personal content. A distinction must be made between the source website and the search engine.

Incorrect forum post or profile information about me

A public post may contain inaccurate personal information. The right contact point is often the source of the content.

Restrict processing according to Art. 18 GDPR

In addition to deletion and correction, restriction of processing can be requested under certain conditions.

Data portability according to Art. 20 GDPR

Under certain conditions, personal data may be requested in a structured, common and machine-readable format.