Data passed on without consent: your rights against data trading

Your personal data may not be passed on or sold at will. Without a legal basis, usually your consent, passing it on to advertising partners or third parties is unlawful. You can object, demand deletion, and demand information about the recipients.

Reach your next steps and the matching ready-made texts in just a few minutes, free of charge:

Create an objection →

Your chances of getting your money back

Passing on your data is only permissible with a legal basis. If it is missing, you can object to the processing (Art. 21 DSGVO) and demand deletion (Art. 17 DSGVO).

You are entitled to information about which recipients your data was passed on to (Art. 15 DSGVO). That way you can trace the chain and demand deletion there too.

What you should do now

1
1. Demand information
Demand information on which data was passed on to which recipients.
2
2. Object
Object to the passing on and the advertising and demand that it be stopped.
3
3. Demand deletion
Demand deletion of the data processed without a legal basis, including at the recipients.
4
4. File a complaint
In case of unlawful data trading, you can complain to the data protection supervisory authority and check for damages.

How to spot the scam

You suddenly receive advertising from companies you never gave data to.
A consent to the passing on was hidden in the fine print.
On your access request, the recipients are concealed.

Frequently asked questions

May a company pass on my data?

Only with a legal basis, usually your consent or for performance of a contract. Passing it on to advertising partners or data traders without a valid basis is unlawful. Then you can object and demand deletion.

How do I find out who has my data?

Through the right of access (Art. 15 DSGVO): you can demand that the recipients or categories of recipients of your data be named. That way you can trace the chain of passing on.

How do I stop the further use?

Object to the processing and the advertising (Art. 21 DSGVO) and demand deletion (Art. 17 DSGVO), at the original company and at the recipients. In case of unlawful data trading, a complaint to the data protection supervisory authority helps.

Take action now

We put together the ready-made texts and the right places to contact for you.

Create an objection Check a suspicious message

More help: Emergency by phone · Act together · Right to a lawyer · All guides

General information for self-help, not legal advice (RDG). In case of a high loss or uncertainty: contact a consumer advice center or a lawyer.