In the summer of 2008, a popular Polish tabliod Super Express published a nude picture of Justyna Steczkowska that was taken on a Turkish beach during her holidays. The singer sued the publisher for the violation of privacy interest. The Appellate Court in Warsaw in a judgment of 24 February 2010, case file ACa 1176/09, awarded Justyna Steczkowska 80000 PLN compensation and ordered Super Express to publish an apology. The court held that there is no implied consent to the intrusion into privacy, even though it was the hotel’s private beach and a photographed person wasn’t too cautious.
Archive for: February, 2010
Personal interest, case I CSK 217/09
February 26th, 2010, Tomasz RychlickiThe Supreme Court in a judgment of 28 January 2010, case file I CSK 217/09, held that the continuity and repetition of violations of reputation in a certain time interval justifies the possibility of drafting the press apology as provided for in Article 24 § 1 sentence II of the Civil Code in a suitably concise and more general way, that is sufficient for defining the legal contours of (substance/essense) the press tort, its perpetrator, the nature of the tort, statements about the harmed person that were affecting the reputation of his business.
Article 24
§ 1 The person whose personal interests are threatened by someone else’s action, may require the desist of that action, unless it is not illegal. In the event of the infringement one may also require, the person who committed the violation, to fulfill the actions necessary to remove its effects, in particular, to make a statement of the relevant content and appropriate format. According to the conditions laid down in the Code one may also require monetary compensation or payment of an appropriate amount of money for a social purpose indicated.
§ 2 If as the result of a breach of personal interests one has suffered pecuniary prejudice, the aggrieved person may claim compensation based on general principles.
§ 3 The above shall not prejudice the entitlements provided by other regulations, in particular in copyright law and the patent (invention) law.
The Court ruled that the infringement of the plaintiff’s personal interest/rights (his commercial reputation and the firm) was the result of the unacceptable “opinions” and “suggestions” issued by the defendant.
Industrial design, case II GSK 323/09
February 23rd, 2010, Tomasz RychlickiA company filed a notice of opposition to a final decision of the Polish Patent Office (PPO) on the grant of a right in registration for the industrial design “Zadaszenie drzwi” (in English: door canopy) Rp-9198. The opposition has been filed under the provisions of article 102(1), article 103(1), article 104(1) and (2) and article 106(1) of the Polish Act of 30 June 2000 on Industrial Property Law – IPL – (in Polish: ustawa Prawo własności przemysłowej) of 30 June 2000, published in Journal of Laws (Dziennik Ustaw) of 2001 No 49, item 508, consolidated text of 13 June 2003, Journal of Laws (Dziennik Ustaw) No 119, item 1117, with subsequent amendments.
Article 102
1. Any new and having individual character appearance of the whole or a part of a product resulting from the features of, in particular, the lines, colours, shape, texture or materials of the product and its ornamentation, shall constitute an industrial design.Article 103
1. An industrial design shall be considered new if, before the date according to which priority to obtain a right in registration is determined and subject to paragraph (2), no identical design has been made available to the public, i.e. used, exhibited or otherwise disclosed. Designs shall also be deemed to be identical with those made available to the public if their features differ only in immaterial details.Article 104
1. An industrial design shall be considered to have individual character, if the overall impression it produces on the informed user differs from the overall impression produced on such a user by any design which has been made available before the date according to which priority is determined.
2. In assessing individual character, the degree of freedom of the designer in developing the design shall be taken into consideration.Article 106
1. Rights in registration shall not be granted for industrial designs whose exploitation would be contrary to public order or morality; exploitation of an industrial design shall not be considered to be contrary to public order merely because it is prohibited by law.
The opposing party claimed the lack of novelty becuse the disputed design was disclosed inter alia during the exchange of correspondence with the owner and the lack of the individual character of a product. The PPO rejected the opposition and ruled that the industrial design is new. While referring to the cooperation between the opposing company and the owner, the PPO noted that the disclosure of a design was only approved between both parties. The PPO stated that the industrial design in question was not disclosed publicly. In the proceedings before the PPO and the courts no other evidence with regard to public disclosure of the design was submitted.
The Voivodeship Administrative Court in its judgment of 19 November 2008, case file VI SA/Wa 1767/08 dismissed the complaint against the decision of the PPO. The Supreme Administrative Court in a judgment of 20 January 2010, case file II GSK 323/09 dismissed the cassation complaint. The SAC held that any correspondence, not only commercial, bears the characteristics of confidentiality due to the fact that by its nature it is addressed to the designated entity, and refers the specific content associated with a certain confidence on the part of the sender. Its publication requires the consent of both parties. Therefore, it coould not be argued that the disclosure of a new design could take place in the correspondence between the two businesses working together. The cassation complaint also presented the argument of exceeding the principle of formality. The Court ruled it unfounded based on provisions of Articles 255 and 256 of the IPL.
Article 2551
1. Litigation proceedings in the cases referred to in Article 255(1)(i)-(viii) shall be initiated at a written request.
2. A request for initiation of a proceeding shall be subject to payment of a fee.
3. A request shall contain:
(i) identification of the parties and their addresses
(ii) brief presentation of the case
(iii) clear definition of the decision sought
(iv) reference to the legal ground
(v) indication of evidence
(vi) signature of the requesting party and a date
4. The request shall be accompanied by:
(i) a power of attorney, where the request is submitted by the representative
(ii) copies of the request in a number corresponding to the number of the parties to the litigation proceeding
(iii) a receipt for the payment of the fee referred to in paragraph (2).
5. The Patent Office shall check whether the request for initiation of a litigation proceeding satisfies the formal requirements referred to in paragraphs (3) and (4).
6. Where the request fails to satisfy the formal requirements, the Patent Office shall invite the requesting party to remove the defects, under pain of discontinuance of the proceeding, within 30 days.Article 256
1. The provisions of the Code of Administrative Procedure shall apply accordingly to litigation procedure before the Patent Office in cases not regulated by this Law.
2. To costs of proceedings the provisions applied in civil law proceedings shall apply accordingly.
3. The provisions of the Code of Administrative Procedure governing re-examination, at a party’s request, of cases, in which decisions not liable to appeal were taken, shall not apply to decisions on merits taken after hearing.
31. The cases referred to in Article 2553(2) may be requested to be re-adjudicated. A time limit for submitting a request shall be, in case of a decision made – two months and in case of an order issued – one month from the date of the decision or the order being served upon the party.
Because of the adversarial nature of proceedings before the PPO, the party has to prove the circumstances from which it derives the legal consequences that are more favorable. The proceedings before the Polish Patent Office are reduced of principles set out in the of the Administrative Proceedings Code – APC – (in Polish: Kodeks postępowania administracyjnego) of 14 June 1960, Journal of Laws (Dziennik Ustaw) No 30, item 168, consolidated text of 9 October 2000, Journal of Laws (Dziennik Ustaw) No 98, item 1071 with subsequent amendments, including the principle of formality, or the principle to watch over the interests of the parties by the public administration bodies.
This judgment concerned the industrial design “Zadaszenie drzwi” (in English: door canopy), Rp-9198. See also “Polish regulations on industrial designs” and “Polish case law on industrial designs“.
E-access to public information, case II SAB/Wa 86/07
February 20th, 2010, Tomasz RychlickiThe Voivodeship Administrative Court in Warsaw in its judgment of 10 December 2007, case file II SAB/Wa 86/07, held that the request filed in the electronic form (e-mail) that was not signed with the qualified electronic signature is a legally sufficient request for disclosure of public information. Furthermore, the request for disclosure of public information does not initiate the administrative proceedings and it is not intended to finalize the proceedings with the refusal. It is logical and obvious that applicant’s intention is to obtain information and not to receive a negative decision. The request for public information can take any form, unless it is sufficiently clear what is requested.
See also “Polish case law on e-access to public information“.
E-access to public information, case II SAB/Sz 148/09
February 20th, 2010, Tomasz RychlickiThe Voivodeship Administrative Court (VAC) in Szczecin, in a judgment of 16 December 2009, case file II SAB/Sz 148/09, held that the general principle set in article 61 of the Polish Constitution, is the access to information on the activities of public authorities. Any exceptions to this rule should be formulated explicitly, and all doubts should be resolved in favor of the access.
Article 61
1. A citizen shall have the right to obtain information on the activities of organs of public authority as well as persons discharging public functions. Such right shall also include receipt of information on the activities of self-governing economic or professional organs and other persons or organizational units relating to the field in which they perform the duties of public authorities and manage communal assets or property of the State Treasury.2. The right to obtain information shall ensure access to documents and entry to sittings of collective organs of public authority formed by universal elections, with the opportunity to make sound and visual recordings.
3. Limitations upon the rights referred to in paras. 1 and 2 above, may be imposed by statute solely to protect freedoms and rights of other persons and economic subjects, public order, security or important economic interests of the State.
4. The procedure for the provision of information, referred to in paras. 1 and 2 above shall be specified by statute, and regarding the Sejm and the Senate by their rules of procedure.
Judgments of the Polish courts are information on public matters according to provisions of article 1(1) of the Polish Act of 6 September 2001 on access to public information – API – (in Polish: Ustawa o dostępie do informacji publicznej) Journal of Laws (Dziennik Ustaw) No. 112, item 1198, with subsequent amendments.
Each information on public matters constitutes public information in the understanding of the Act and is subject to being made available on the basis of principles and under the provisions defined in this Act.
The Court held that according to article 6(1) point 4 letter (a) of the API, a judgment is an official document that should be made available according to the procedures and principles set in the API.
Article 6(1) The following information is subject to being made available, in particular on:
(…)
4) public data, including:
a)contents and form of official documents, in particular:
- contents of administrative acts and other resolutions,
- documentation on the control and its effects as well as presentations, opinions, conclusions and statements of the entities having conducted the control,
The VAC also noted that anyone is allowed to request the access to public information in electronic form or in the traditional way, on paper.
See also “Polish case law on e-access to public information“.
E-access to public information, case II SAB/ Wa 57/09
February 18th, 2010, Tomasz RychlickiIn 2008, the Polish media reported a story on the Polish Post which allegedly tested a system that scans envelopes and parcels. There were rumours that information gathered by such scanning could be used by the Internal Security Agency (ABW). ABW denied, but the Inspector General for Personal Data Protection has decided to investigate how the collected data are processed during the scan.
Roman P. has requested the GIODO to make available the results of the investigation. Since Roman P. filed his request by phone and then by e-mail, the GIODO informed that it will consider the request only after it receives personal data of Roman P.
The GIODO based its opinion on the provisions of article 63 § 3 of the Administrative Proceedings Code – APC – (in Polish: Kodeks postępowania administracyjnego) of 14 June 1960, Journal of Laws (Dziennik Ustaw) No 30, item 168, consolidated text of 9 October 2000, Journal of Laws (Dziennik Ustaw) No 98, item 1071 with subsequent amendments.
§ 1. Applications (requests, explanations, appeals, complaints) may be filed in writing or by telegram, telex, fax, email or by using the form available on the website of the competent public administration, allowing data entry into the communications system of the body, as well as verbally to the protocol.
§ 2 The application shall include at least an indication of the person from whom it comes, its address and it shall satisfy other requirements stipulated in the special regulations.
§ 3 The application submitted in writing or orally to the protocol shall be signed by the applicant, and also by an employee who made the protocol. When the application is filed by a person who can not or do not know how to make a signature, the application or a protocol is signed by other person authorized, by making a reference next to the signature.
The GIODO decided that the application filed by Roman P. shall indicate the person from whom it derives, its address and the scope of the request, otherwise, the request will not be examined.
Roman P. brought a complaint to the Voivodeship Administrative Court (VAC) in Warsaw. The VAC in a judgment case file II SAB/ Wa 57/09, ruled that the GIODO failed to act and ordered the Inspector General for Personal Data Protection to examine Roman P. request within 14 days because information he demanded, is deemed as the public information as defined in article 5(2) of the Polish Act of 6 September 2001 on access to public information – API – (in Polish: Ustawa o dostępie do informacji publicznej) Journal of Laws (Dziennik Ustaw) No. 112, item 1198, with later amendments. The Court also ruled that arguments and findings to leave the application without further examination, because it was sent by e-mail, have no support in the APC.
See also “Polish case law on e-access to public information“.
Pharmaceutical trade marks, case VI SA/Wa 1176/09
February 17th, 2010, Tomasz RychlickiOn 4 June 2002, the Polish entrepreneur Wojciech Soszyński from Sopot applied to the Polish Patent Office for the right of protection for OCERIN Z-251142 trade mark in class 5 for goods such as oral pharmaceutical preparations in a form of granulate, drops, capsules, emulsion, herbal blends, pastes, pills, powder, syrup, suspensions, gels, pharmaceutical preparations for mouthwashingin a form of aerosol, chewing gum, capsules, concentrate, drops, pills, pastes, liquids, powder, tablets, suspensions, gels, pharmaceutical preparations for dental purposes in a form of emulsion, paste, liquids, powder, tablets, suspensions, gels, pharmaceutical preparations for inhalation purposes in a form of aerosol, emulsion, gas, ointments, liquid, powder, tablet, suspension, gels, trachea and lung pharmaceutical preparations in a form of powder, solution, suspension, pharmaceutical preparations for skin care applied on skin and percutaneous in a form of medicated bath supplements, emulsion, cataplasm, collodion, concentrate, cream, ointment, dressing, paste, foam, plaster, liquids, powder, shampoo, suspension, gels, pharmaceutical preparations for eyes in a form of drops, creams, ointments, liquids, drops solvent, vaginal pharmaceutical preparations in a form of pills, tampons, vaginal douching suspensions, gels, powder, solvents for gel preparation, rectal pharmaceutical preparations in a form of suppositories, emulsion, capsules, concentrates, creams, ointments, foams, liquids, tablets, tampons, suspensions, gels, vesica and urethra pharmaceutical preparations in a form of washing liquids, powder for liquid preparation, gels, pharmaceutical preparations for ears in a form of aerosol-emulsion, solutions, suspensions, creams, drops, ointments, liquids, powders, rods, tampons, gels, pharmaceutical preparations for nose in a form of aerosol-suspension, liquids, drops, ointments, powders, rods, vaginal pharmaceutical preparations in a form of emulsion for irrigation, intravaginal tablets, intravaginal capsules, intravaginal creams, intravaginal ointments, intravaginal foams.
The Polish Patent Office (PPO) in its decision of 21 July 2008 refused to grant a right of protection. The PPO noted that BEIERSDORF AG from Hamburg reported observations as to the existence of grounds that may cause a right of protection to be denied. BEIERSDORF AG argued that OCERIN is similar to its EUCERIN IR-710661 trade mark applied for with the priority of 3 March 1999 for goods in class 5 such as cosmetics for medical purposes prepared in the form of creams, gels and lotions, all for the protection of dry skin, dermatologic preparations for prevention of allergy and skin ills, medical preparations for care, washing and beauty of hair, medical preparations for shower and bath purposes, medical sun tanning preparations, medical preparations against aging of skin, prevention skin preparations against UV radiation, and another word-figurative trade mark EUCERIN IR-765927.
The PPO found that the greater part of the opposed signs is identical and differs only in the beginning. Taking into account the specificity of goods in Class 5, the consumer may think that this is a variation of a single product or products with a similar purpose. It cannot be excluded that the consumer will shift the similarity (in the core and the ending of a sign) to the origin of goods, nor that differences in the beginning of a sign, will be shifted to the differences between the products, rather than differences in terms of their origin. Thus, in both cases, the signs causes the consumer the confusion as to the origin of goods.
The PPO also noted that both signs have no particular meaning in the Polish language. Consumers may try, or not, to give them some meaning. The PPO pointed out that it is very often in the market of pharmaceuticals that endings of signs or whole signs refer to the active substances. However, the average recipient has no knowledge of chemistry and pharmacy. Therefore, one may not know what components produce the substance or whether they are derivatives, and how it translates on the naming. The similarity of words is all, what is available to consumers and on such basis, they have to decide on the origin of goods. A large part of products listed in both lists of goods are those that are available without any prescription, and thus the support of pharmacist during its purchase cannot always be assumed. These products are also offered in hypermarkets and drugstores, where you cannot always count on the help of a sales assistant. But even if the pharmacist may give an advice on the composition of a product, it still does not determine the lack of the association between entrepreneurs. The assumption on the association between entrepreneurs should be concluded from minor differences in signs or other indications on the packaging and labeling, and such a situation, while comparing the signs, cannot be presumed, since the mark must indicate the origin of the goods itself.
The complaint to the Voivodeship Administrative Court (VAC) in Warsaw was brought by Oceanic S.A., legal successor of Wojciech Soszyński’s trade mark application. The VAC in its judgment of 7 October 2009, case file VI SA/Wa 1176/09, ruled that the risk of misleading the public as to the origin of goods decides whether the two signs are similar. The questions does not concern a personified trader/entrepreneur but it is all about the sign which has always to mark and indicate that the goods originate exclusively from the same trader. The unacceptable misleading of public as to the origin of goods is created by the similarity of goods and the similarity of signs.
Therefore, any doubts should be decided in favor of the proprietor of the trade mark with an earlier priority. This rule is a consequence of the belief that the entrepreneur who, for the same type of goods, chooses a sign that is similar to the trade mark with earlier priority, acts at its own risk and all uncertainty should be decided against him. A comparison of the lists of goods for EUCERIN and OCERIN trade marks indicates that these goods are similar. In the midst of these products are both cosmetics and pharmaceutical preparations of cosmetic and medicinal characteristics. This judgment is not yet final. A cassation complaint may be filed to the Supreme Administrative Court.
See also “Polish regulations on pharmaceutical trade marks” and “Polish case law on advertising of pharmaceuticals“.
Trade mark law, case VI SA/Wa 1715/09
February 16th, 2010, Tomasz RychlickiThe Voivodeship Administrative Court in Warsaw in its judgment of 10 January 2010, case file VI SA/Wa 1715/09, ruled that the registration proceedings is not a source of the entitlement to a trade mark, but it only provides specified changes in the Trade Mark Register with regard to the holder of that right and therefore it is totally different from proceeding related to the invalidation or declaration on the lapse of a trade mark. The standing in registration proceeding cannot be justified based on the same arguments, that were used in the course of proceedings, which aimed to resolve trade mark rights. This judgment is not yet final. A cassation complaint may be filed to the Supreme Administrative Court.
Internet domains, case I ACz 232/10
February 14th, 2010, Tomasz RychlickiAs polite fans would probably say, the condition of Polish football is at least “debatable”, and others might use more crude words. The corruption and inefficient management of the Polish national football leagues are the tip of the Iceberg. This situation causes frustration of many people who try to blame the Polish Football Association (PZPN) for all their miseries. Some of these people decided to take matters into their own hands. They formed the Association of Defenders and Supporters of the Polish Football. They registered koniecpzpn.pl (end of Polish Football Association) as an Internet domain name and started to host a website with critical publications on PZPN under that domain. One didn’t need to wait too long before lawyers representing the Polish Football Association entered “the game”. New players acting on behalf of the Polish Football Association requested the court to issue a preliminary injunction in order to secure the case for the future action for trade mark protection and for the protection of personal rights.
The District Court in Lódż, I Civil Division, in its order of 14 January 2010, case file I Co 203/09 granted the injunction and ordered the prohibition of placing at koniecpzpn.pl website the following trade marks owned by PZPN: R-142616, R-170024, R-188961 and R-188962, the Court also ordered a block on the access to the content of the website available under www.koniecpzpn.pl domain name. The Court set the PZPN a two-week deadline for lodging the petition instituting proceedings for trade mark protection and the protection of personal rights under the pain of withdrawing the injunction in case no lawsuit was filed by that date.
The Appellate Court in Łódź in its decision of 24 March 2010 case file I ACz 232/10 annulled the injunction. The Court held that PZPN did not exactly specified which claims it intends to enforce. The Court ruled that all claims should be precisely specified in the request because the lack of precise claims make impossible to verify whether conditions for the injunction are met, i.e. whether the claim is reliable and the applicant has legal interest (locus standi) in enforcing it. The Court also noted that the injunction would be unduly restrictive and burdensome beyond measure. According to the Court the blocking of a website could be considered as inadmissible preventive censorship.
See also “Polish case law on domain names“.
Who is the controller in social networking sites?
February 14th, 2010, Tomasz RychlickiThe question of who is the “controller” and the differences between a “controller” and “processor” as defined in the article 2(d) and (e) of the Directive 95/46/EC of the European Parliament and of the Council of 24 October 1995 on the protection of individuals with regard to the processing of personal data and on the free movement of such data, in the context of social networking sites (SNS), are at least controversial not only in Polish case law. See for instance T. Zeggane, W. Maxwell, US and EU Authorities Review Privacy Threats On Social Networking Sites, Ent. L.R. 2008, 19(4), 69-74.
The second area requiring clarification is the concept of “data controller” in an SNS environment. Under European privacy law, the controller is the entity which determines the purposes and means of the processing of personal data. In an SNS context, there are two broad categories of data: the information that the user provides to the SNS platform to register (such as the user’s real name and email address), and the data that the user uploads onto his or her profile. The former is personal data which the SNS platform controls. The latter is “user generated content”, which the user controls and can choose to share (or not) with others. Some SNS platforms provide the user with tools to control the extent to which information such as photos, personal tastes and the like are used to develop targeted advertising. Where such tools exist, the argument can be made that the user (and not the SNS platform itself) is the “controller” of the content the user uploads onto the profile. The concept of data controller is the cornerstone of European privacy law. The concept of controller as it is traditionally interpreted does not fit easily into the SNS environment, where the user is the focal point
As you can read from the above, the authors suggest that the situation requires a clarification of the concept of “controller” in terms of SNS. A similar view was also presented in the report of the European Network and Information Security Agency (ENISA), “Security Issues and Recommendations for Online Social Networks“, PDF file, p. 25.
See also “Polish regulations on personal data protection” and “Polish case law on personal data protection“.
Personal data protection, case I OSK 667/09
February 13th, 2010, Tomasz RychlickiOn 15 January 2008, Tomasz W. filed with the General Inspector for Personal Data Protection (GIODO) a complaint concerning an unauthorized processing of personal data carried out by the Polish company Nasza Klasa Sp. z o.o. from Wroclaw, the owner of nasza-klasa.pl website. He informed the GIODO, that this very popular Polish website on classmates, hosts a photo featuring his image together with a list of names of other photographed people attached to it. Tomasz W. has repeatedly appealed to the website administrators with the request to remove his name from the list. However, he received no response from Nasza Klasa company.
As a result of the investigation, the GIODO found that on 31 December 2007, a registered user of nasza-klasa.pl posted classmates’ photo featuring students of a primary school. On the same day, another registered user, placed the names of people who were portrayed at the photograph – including the name and surname of Tomasz W. On 2, 9 and 14 January 2008, Tomasz W. requested Nasza Klasa Sp. z o.o. the removal of his personal data.
In a decision of 27 May 2008, case file DOLiS/DEC-314/08/13239, the GIODO, relying on the provisions of the Polish Act of 29 August 1997 on the Protection of Personal Data – PPD – (in Polish: Ustawa o ochronie danych osobowych), Journal of Laws (Dziennik Ustaw) of 29 October 1997, No. 133, item 883, unified text published in Journal of Laws (Dziennik Ustaw) of 6 July 2002, No. 101, item 926, with later amendments, ruled that information on the applicant’s full name, school and class to which he attended, together with his image, are personal data and the data collector is Nasza Klasa Sp. z o.o.
However, the GIODO also ruled that it should be borne in mind that according to the provision of the Polish Act of 18 July 2002 on Providing Services by Electronic Means – PSEM – (in Polish: ustwa o świadczeniu usług droga elektroniczną), Journal of Laws (Dziennik Ustaw) No. 144, item. 1204, as amended, Nasza Klasa sp. z o.o. provides electronic services for registered users of the portal website, consisting of the storage of data of these users in the computer system. This activity is the condition to legalize the processing of personal data in accordance with article 23(1) pt. 5 of the PPD. In addition, the GIODO found that in this case the applicant’s rights have not been violated, because the access to its data was limited to a group of people registered on nasza-klasa.pl website.
Tomasz W. asked the GIODO for the retrial. He pointed out that the reasons for the decision have many contradictions, inconsistencies and is ambiguous. He accused the GIODO of laconic and cursory treatment of his case. He again emphasized that his personal data have been published on the nasza-klasa.pl website without his knowledge or consent, in violation of his civil rights and liberties.
After the rehearing of the case, the GIODO annulled the contested decision, and discontinued the proceedings. GIODO claimed that the re-examination of the case leads to the conclusion that the disputed information about Tomasy W. did not fall within the definition of personal data. The name and surname have been given under his old image from many years ago. Hence, the combination of photos from the past, with a name and surname of a person and a primary school, which such person attended did not allow for the identification of a person without excessive costs and time. The findings that the disputed information is not personal data within the meaning of the PPD caused the proceedings in the matter to be groundless and on the basis of article 105 § 1 of the APC, it had to be discontinued.
Tomasz W. lodged a complaint with the Viovodeship Administrative Court (VAC) in Warsaw. The complainant asked for annulment of the decision of first and second instance. Tomasz W. claimed the violation of the substantive law, i.e. article 6(1) of the PPD, through its improper interpretation, of article 32(1) pt 7 and 8 of that Act, by recognizing that Tomasz W. is not entitled to request cessation of the processing of his data and the right to object, and a breach of article 7 of the APC by not explaining all the relvant facts. Tomasz W. disagreed with the statement of the GIODO that questioned information about his person is not personal data within the meaning of the PPD. He stated that any information about an identified or identifiable individual is personal data. Furthermore, he argued that the claim of the GIODO that the data are available only for specific people – registered users of the portal is not acceptable, because nasza-klasa.pl has no mechanisms for verification of users identity, which makes the questioned data easily accessible for everyone. Moreover, Tomasz W. also argued that a registered user who does not know him would have some difficulty in identifying his person but such obstacles would not happen to a person who knows about Tomasy W., and is looking for additional information.
The Voivodeship Administrative Court in a judgment of 3 March 2009 case file II SA/Wa 1495/08 ruled that the GIODO erred in its decisions, because information about the name and surname of Tomasz W., combined with information about the name and address of the primary school and the determination of the class to which he attended in 1978/79, even if it was thirty years ago, are personal data. According to the Court provisions of article 1 of the PPD introduced the principle of autonomy of human information, meaning the protection of information about human being. This provision is a kind of emanation of the general right guaranteed by the Polish Constitution in article 47, according to which “Everyone shall have the right to legal protection of his private and family life, of his honour and good reputation and to make decisions about his personal life”. This means that the protection of personal data is related to the protection of privacy rights. This follows from the wording of article 6 of the PPD, indicating that the personal data concern identified or identifiable natural or legal person and that the identifiable is a person is one whose identity can be determined. From wording of that provisions the VAC concluded that personal data are data that identify a person’s identity.
The VAC also relied on the content of recital 12 of the Directive 95/46/EC of the European Parliament and of the Council of 24 October 1995 on the protection of individuals with regard to the processing of personal data and on the free movement of such data, which emphasized the protection of all data relating to a person, and therefore also information about someones past.
(12) Whereas the protection principles must apply to all processing of personal data by any person whose activities are governed by Community law; whereas there should be excluded the processing of data carried out by a natural person in the exercise of activities which are exclusively personal or domestic, such as correspondence and the holding of records of addresses
However, in recital 26 of the abovementioned Directive states that data protection rules must apply to any information concerning an identified or identifiable person. In order to determine whether a person is identifiable, all the means which can be used by the controller or any other person to identify a person, should be taken into the account. The rules of data protection do not apply to data rendered anonymously in such a way that a subject of the data can not be identified. The identification of a given person concerns also past information about a specific human being, by which information one can learn about such person’s identity. Accordingly, the VAC held that European law means the protection of personal data as the protection of all the facts concerning the past of a particular person, which corresponds with the content of article 6(2) of the PDP. So this means that such data would also be protected.
Referring to the foregoing facts of Tomasz W. case, the VAC ruled that that nasza-klasa.pl website published his image and name. In the opinion of the court these are the personal data which are protected by the PPD, because on their basis one is able to identify given person.
Nasza Klasa sp. z o.o. filed a cassation complaint with the Supreme Administrative Court (SAC) challenging in entirety the judgment of the VAC. The Supreme Administrative Court in a judgment of 18 November 2009, case file I OSK 667/09, rejected the complaint. The SAC held that the primary issue arising in this case was whether a classmates’ picture that was taken thirty years ago, at which Tomasz W. is potrayed, in the circumstances of the case, can be analyzed to determine his identity without necessarily involving excessive resources or time, and therefore, whether the data disclosed in the photo in question, constitutes personal data within the meaning of article 6 of the PPD, and whether it should be protected.
The concept of “personal data” on the Polish law includes any information concerning an individual if it is possible to define its identity and its identification. Personal data is a set of messages about a particular person such integrated that it allows for its individualization. It includes at least information necessary for identification (name, surname, place of residence), but this is not restricted, because it also include further information, strengthening the degree of identification. Such information will also include pictures of the individual, even if they were taken in the past, allowing to identify a person. In a situation where such a photograph is presented with a name and surname of the person portrayed, in a place accessible to an unlimited number of entities, it must be considered that it constitutes personal data subject to protection under the PPD. Mainly, the objective evaluation criteria decides for the qualification of given information as personal data, but it also should comprise of all information, including extralinguistic (context), to which third party may have or has an access. A different approach to the presented issues would maginalize the importance of the laws and it would not relate to its designated function.
Thus it should be considered that the image of Tomasz W. portrayed at the photograph that was taken 30 years ago, affixed with the class, his name and surname, and then published at nasz-klasa.pl website constitutes personal data within the meaning of article 6(2) of the PPD, and the cassation complaint was not justified. The SAC also noted that the consent for the processing of personal data cannot be in any way implied.
The SAC also stressed the fact the Internet as a source of information is increasing on a unknown scale and importance. It provides an access to specific information to a vast number of persons and allows for any of its processing within the meaning of the PPD. At the same time there are not yet developed appropriate mechanisms for the protection of individual rights when those rights have been violated as a result of the disclosure of information on the Internet. Then, it is a great role of law enforcement bodies, including the Inspector General for Personal Data Protection in creating practice to comply with applicable laws also on the Internet. It is an unacceptablr situation in which the entity seeks to remove its image from a particular website, and the administration fails to take action to ensure the protection of civil rights. The image is one of the very personal property rights and lack of consent to its publication, if it is not a public person, is a sufficient reason to believe that regulations of the PPD apply, if the conditions set in the article 6(2) of the PPD have been met. There is a legal sequel to this story. See “Personal data protection, case II SA/Wa 1212/10“.
See also “Polish regulations on personal data protection” and “Polish case law on personal data protection“.
Personal data protection, case II SA/Wa 71/07
February 12th, 2010, Tomasz RychlickiA lawyer representing one Polish entrepreneur, and as you already know personal data of the parties are removed from Polish courts’ judgments, requested the General Inspector for Personal Data Protection (GIODO) to issue an order to Home.pl company from Szczecin, to disclose personal data such as name, surname, the firm, address, office’s seat, phone number and e-mail address of a person, which had only published its caller id, and who registered a certain Internet domain name. The lawyer stated that his client is claiming the right to use the questioned domain name and the requested information is necessary for the initation of the arbitration proceedings before the Court of Conciliation at the the Polish Chamber of Information Technology and Telecommunications.
Home.pl refused to provide the abovementioned personal data, arguing that the parties of the legal relationship arising from the fact of the registration and maintenance of Internet domain names are the Research and Academic Computer Network (in Polish: Naukowa i Akademicka Sieć Komputerowa) – the national registry of the .pl domain, and the domain name subscriber.
The GIODO performed an investigation based on the administrative proceedings regulations. The GIODO did an inspection of the Company’s headquarters and found that Home.pl maintains a separate collection of data of subscribers who have registered their domain names in NASK through Home.pl services. NASK is the national domain name registrar, while Home.pl arranges for the registration and maintenance of Internet domain names. Home.pl represents an applicant for the domain name registration before NASK. A natural or legal person and Home.pl have to establish a legal relationship based on a registration contract in order to register the domain name in NASK. The legal relationship is based on registering and maintaining of the internet domain name. The GIODO found that in this case, the contested domain name was registered by a natural person.
In September 2006, the General Inspector for Personal Data Protection issued an administrative decision which ordered Home.pl to disclose personal data of the individual who registered the Internet domain name in question, the name, surname, address, phone number and e-mail address. Home.pl requested for a retrial of the case. The GIODO upheld the decision and Home.pl filed a complaint with the Voivodeship Administrative Court (VAC) in Warsaw.
The Court in a judgment of 30 Novmeber 2007, case file II SA/Wa 71/07 ruled that the complaint was based on articles 29(2) in connection with article 22 of the Polish Act of 29 August 1997 on the Protection of Personal Data – PPD – (in Polish: Ustawa o ochronie danych osobowych), Journal of Laws (Dziennik Ustaw) of 29 October 1997, No. 133, item 883, unified text published in Journal of Laws (Dziennik Ustaw) of 6 July 2002, No. 101, item 926, with later amendments.
Article 29
1. In case of providing the access to the data for the purposes other than including into the data filing system, the controller shall disclose the data kept in the data filing system to persons or subjects authorised by the law.
2. Personal data, exclusive of data referred to in Article 27 paragraph 1, may also be disclosed, for the purposes other than including into the data filing system, to persons and subjects other than those referred to in paragraph 1 above, provided that such persons or subjects present reliably their reasons for being granted the access to the data and that granting such access will not violate the rights and freedoms of the data subjects.
3. Personal data are disclosed at written and justified requests, unless the provisions of another law state otherwise. Such requests should include information allowing for identification of the requested personal data within the filing system and indicating their scope and purpose.
4. Disclosed personal data shall be used only pursuant to the purpose for which they have been disclosed.
(…)
Article 22
The proceedings with respect to the matters regulated by this Act shall be conducted pursuant to the provisions of the Code of Administrative Procedure, unless other provisions of the law state otherwise.
According to the VAC, provisions of article 29(1) and (2) allow third parties to request the disclosure of personal data for purposes other than inclusion in the collection. It should be noted that these provisions being in force until 1 May 2004, gave no grounds to demand the disclosure if the controller was the private sector. This situation changed after the amendment of 22 January 2004.
The VAC noted that the request for disclosure of personal data may be filed by any person i.e. natural person, any organizational unit, both public and private. It is important that the possesion of personal data is necessary to achieve intended goals, and the request for personal data is credible and reasonable. Such request does not require a collector to disclosure personal data because it must assess whether the conditions have been met to provide such data according to provisions of articles 29 of the PPD.
1. In case of providing the access to the data for the purposes other than including into the data filing system, the controller shall disclose the data kept in the data filing system to persons or subjects authorised by the law.
2. Personal data, exclusive of data referred to in Article 27 paragraph 1, may also be disclosed, for the purposes other than including into the data filing system, to persons and subjects other than those referred to in paragraph 1 above, provided that such persons or subjects present reliably their reasons for being granted the access to the data and that granting such access will not violate the rights and freedoms of the data subjects.
3. Personal data are disclosed at written and justified requests, unless the provisions of another law state otherwise. Such requests should include information allowing for identification of the requested personal data within the filing system and indicating their scope and purpose.
4. Disclosed personal data shall be used only pursuant to the purpose for which they have been disclosed.
However, the VAC stressed that fact that collector’s discretion cannot mean its arbitrariness. In the case of the unfounded refusal to provide personal data according article 29 (2) of the PPD, the General Inspector for Personal Data Protection shall have the right – in accordance with article 18(1) pt. 2 of the PPD – to require the disclosure of personal data.
1. In case of any breach of the provisions on personal data protection, the Inspector General ex officio or upon a motion of a person concerned, by means of an administrative decision, shall order to restore the proper legal state, and in particular:
(…)
2) to complete, update, correct, disclose, or not to disclose personal data,
Undoubtedly, the request for the disclosure of personal data must be credible and legitimate. Thus, if such request is do not precluded by provisions of article 27 of the PPD, the collector must disclose such data.
1. The processing of personal data revealing racial or ethnic origin, political opinions, religious or philosophical beliefs, religious, party or trade-union membership, as well as the processing of data concerning health, genetic code, addictions or sex life and data relating to convictions, decisions on penalty, fines and other decisions issued in court or administrative proceedings shall be prohibited.
2. Processing of the data referred to in paragraph 1 above shall not constitute a breach of the Act where:
1) the data subject has given his/her written consent, unless the processing consists in erasure of personal data,
2) the specific provisions of other statute provide for the processing of such data without the data subject’s consent and provide for adequate safeguards,
3) processing is necessary to protect the vital interests of the data subject or of another person where the data subject is physically or legally incapable of giving his/her consent until the establishing of a guardian or a curator,
4) processing is necessary for the purposes of carrying out the statutory objectives of churches and other religious unions, associations, foundations, and other non-profitseeking organisations or institutions with a political, scientific, religious, philosophical, or trade-union aim and provided that the processing relates solely to the members of those organisations or institutions or to the persons who have a regular contact with them in connection with their activity and subject to providing appropriate safeguards of the processed data,
5) processing relates to the data necessary to pursue a legal claim,
6) processing is necessary for the purposes of carrying out the obligations of the controller with regard to employment of his/her employees and other persons, and the scope of processing is provided by the law,
7) processing is required for the purposes of preventive medicine, the provision of care or treatment, where the data are processed by a health professional subject involved in treatment, other health care services, or the management of health care services and subject to providing appropriate safeguards,
8) the processing relates to those data which were made publicly available by the data subject,
9) it is necessary to conduct scientific researches including preparations of a thesis required for graduating from university or receiving a degree; any results of scientific researches shall not be published in a way which allows identifying data subjects,
10) data processing is conducted by a party to exercise the rights and duties resulting from decisions issued in court or administrative proceedings.
The VAC had to consider the question of whether the application met the conditions set in article 29 of the PPD. The Lawyer proved that, the disclosure of personal data of a person who registered the disputed domain because was necessary for the initation of the arbitration proceedings before the Court of Conciliation at the the Polish Chamber of Information Technology and Telecommunications. The Court noted that the arbitration proceedings are held in accordance with article 1188 § 1 of the Civil Proceedings Code – CPC (in Polish: Kodeks Postępowania Cywilnego) of 17 November 1964, Journal of Laws (Dziennik Ustaw) No 43, item 296, with later amendments.
The proceedings before the Court of Conciliation starts with the lodging of the statement of claim (the suit), which means that the suit should comply with the conditions laid down in article 187 § 1 of the CPC. Under that provision, the statement of claim should meet the requirements of the pleading, and it also shall include: clearly defined demand in matters of property rights and the value of the claim, unless the case concerns the amount of money. The suit shall include all facts justifying the request and, if necessary, to justify the jurisdiction of the court. In accordance with article 126 § 1 pt. 1 of the CPC, every pleading shall also contain, inter alia, the designation of the court to which it is addressed, the name or names of the parties, their legal representatives and/or agents. Therefore, the essential element of the claim for infringement of personal rights is to show the person against whom the request is addressed, i.e. the defendant in future proceedings for infringement of personal rights, and defendant’s address. The VAC found that the request in the Home.pl case was fully justified.
The Court also confirmed that Home.pl is the controller within the meaning of article 7(4) of the PPD, because according to the agreement with NASK, Home.pl decides on the purposes and means of the processing of personal data related to people who registered domain names. Thus, the party of the case was Home.pl, not NASK.
See also “Polish regulations on personal data protection“, “Polish case law on personal data protection” and “Polish case law on domain names“.
Personal data protection, case II SA/Wa 1085/04
February 11th, 2010, Tomasz RychlickiIn July 2003, the Inspector General for Personal Data Protection (GIODO) received a complaint in which a natural person, known as W.K. (personal data of the parties are removed from Polish courts’ judgments), requested the GIODO to issue an order to the Polish Internet company to reveal personal data of persons, against which the applicant wanted to initiate legal proceedings. The complaint showed that the online forum operated by the Internet company hosted defamatory content posted by persons using only nicknames.
W.K. proved that he had requested the Company to disclose full IP addresses of computers from which persons using only nicknames have sent messages to the online forum. The applicant also pointed out that the Regional Prosecutor’s Office refused to determine the perpetrators of the alleged defamation. The refusal was also upheld by the District Prosecutor’s Office.
W.K. pointed out that he brought a private accusation based on article 212 § 1 of the Criminal Code – CRC – (in Polish: Kodeks Karny) of 6 June 1997, Journal of Laws (Dziennik Ustaw) No 88, item 553, with later amendments, to the Regional Court in K., against the persons who used given nicknames. The Court has issued an order in which it considered the private accusation legally ineffective because it included error in the form – i.e., no indication of names of defendants and their addresses, and W.K. did not clear these errors.
The GIODO has found that the purpose for which W.K. has applied for, i.e. the access to personal data, to assert his rights before the court, is legally justified. The use of these data by the applicant in the proceedings could not be considered as a violation of the rights and freedoms of persons whos personal data was collected because after the initiation of criminal or civil proceedings, personal data would be in a disposition the court.
The Company filed a complaint to the Voivodeship Administrative Court (VAC) in Warsaw. The Court in a judgment of 9 February 2005, case file II SA/Wa 1085/04, annulled the contested decision. The VAC held that the complaint was based on article 23(1) pt. 5 of the Polish Act of 29 August 1997 on the Protection of Personal Data – PPD – (in Polish: Ustawa o ochronie danych osobowych), Journal of Laws (Dziennik Ustaw) of 29 October 1997, No. 133, item 883, unified text published in Journal of Laws (Dziennik Ustaw) of 6 July 2002, No. 101, item 926, with later amendments.
1. The processing of data is permitted only if:
5) processing is necessary for the purpose of the legitimate interests pursued by the controllers or data recipients, provided that the processing does not violate the rights and freedoms of the data subject.
The court did not accept that the wording of this provision can be interpreted as a rule requiring a data controller to reveal personal data at the request of the person whose requested data does not concern. The basis for such claims available for third parties for purposes other than inclusion in the data collection, was provided in the article 29(1) and (2) of the PPD. This provision being in force until 1 May 2004, did not give rise to demand release of the data, if the controller/administrator of the data were private sector.
The Court also held that the imposition of the duty of the data controller can only be done when the information being available to the controller falls into the category of personal data as defined in article 6(1) of the PPD.
personal data shall mean any information relating to an identified or identifiable natural person.
The requested information related to IP addresses of computers from which the messages were posted by certain people using certain nicknames. The Company argued that it does not require users of its forum to identify themselves in order to post information, what causes that, the IT administration system of the portal website hosting different forums, registers only IP address of computers of persons using the system, and it does not produce other data for identifying the user of a forum. Only a request to the operator of the telecommunication network could lead to the identification of the computer which was connected to the server hosting the portal and its forums. The Court cited English and Polish comentators and found that information, that without extraordinary and disproportionate effort can be “linked” with a specific person, especially by using readily and widely available sources, also deserve credit for their category of personal data. The identifiable person is defined in article 6(2) of the Polish Act of August 29, 1997 on the Protection of Personal Data – PPD – (in Polish: Ustawa o ochronie danych osobowych), Journal of Laws (Dziennik Ustaw) of October 29, 1997, No. 133, item 883, unified text published in Journal of Laws (Dziennik Ustaw) of July 6, 2002, No. 101, item 926, with later amendments.
2. An identifiable person is the one who can be identified, directly or indirectly, in particular by reference to an identification number or to one or more factors specific to his/her physical, physiological, mental, economic, cultural or social identity.
3. A piece of information shall not be regarded as identifying where the identification requires an unreasonable amount of time, cost and manpower.
See also “Polish regulations on personal data protection” and “Polish case law on personal data protection“.
Industrial design case, VIII SA/Wa 332/09
February 11th, 2010, Tomasz RychlickiThe Voivodeship Administrative Court in Warsaw in a judgment of 15 December 2009, case file VIII SA/Wa 332/09, ruled that he “informed user” is a person who continues to use a product and therefore has some knowledge about its design. It is not a professional. This may be a very attentive consumer who knows what is he or she looking for and who draws attention to all visible elements of the product. The infromed user who uses cartridges for a roller blind, is certainly not an average user or an average purchaser of such product. While assessing the individual character of a cartridge for a roller blind, the scope of creative freedom should be assesed, taking into account the nature of the product and its utilitarian functions, and then, by establishing the characteristics of an “informed user”, the evaluation of a products and the differences should be performed through such prizm, bearing in mind that the “informed user” is one who knows that there are different types of cartridges and who examine them carefully. This judgment is not yet final. The parties may file a cassation complaint to the Supreme Administrative Court.
This judgment concerned the industrial design “Kaseta do rolet” (in English: cartridge for a roller blind), Rp-8019.
See also “Polish regulations on industrial designs” and “Polish case law on industrial designs“.
Computer crime, case V K 1595/08
February 9th, 2010, Tomasz RychlickiArnold Buzdygan brought a private accusation before the Regional Court for Wrocław Śródmieście V Criminal Division against Olgierd Rudak. The indictment was based on articles 212 § 2 and 216 § 2 of the Criminal Code – CRC – (in Polish: Kodeks Karny) of 6 June 1997, Journal of Laws (Dziennik Ustaw) No 88, item 553, with later amendments.
Article 212. § 1. Whoever imputes to another person, a group of persons, an institution or organisational unit not having the status of a legal person, such conduct, or characteristics that may discredit them in the face of public opinion or result in a loss of confidence necessary for a given position, occupation or type to activity
shall be subject to a fine, the penalty of restriction of liberty or the penalty of deprivation of liberty for up to one year.
§ 2. If the perpetrator commits the act specified in § 1 through the mass media
shall be subject to a fine, the penalty of restriction of liberty or the penalty of deprivation of liberty for up to 2 years.Article 216
§ 1. Whoever insults another person in his presence, or though in his absence but in public, or with the intention that the insult shall reach such a person,
shall be subject to a fine or the penalty of restriction of liberty .
§ 2. Whoever insults another person using the mass media, shall be subject to a fine, the penalty of restriction of liberty or the penalty of deprivation of liberty for up to one year.
The court in Wroclaw was obliged ex officio under article 35 § 1 of the Criminal Proceedings Code – CRPC – (in Polish: Kodeks Postępowania Karnego) of 6 June 1997, Journal of Laws (Dziennik Ustaw) No 89, item 555, with later amendments, to examine its jurisdiction and if found otherwise, to refer the case to the court with the proper one. The Court in Wrocław held that pursuant to article 31 § 1 of the CRPC, the jurisdiction is where the offense was committed (the teritorial jurisdiction).
Buzdygan claimed that the offense was commited in the article entitled “Trolls scour in the Net” which was published in the Polish magazine Przekrój of 11 November 2007, in addition the allegedly defamatory content was broadcasted by TV stations such as TVN, Polsat and TVP, in their news and in the Internet. Judge Jolanta Pol-Kulig had to decide on the location of the Internet.
[b]oth the editorial office of Przekrój and the abovementioned TV stations and the Internet are located in Warsaw, one should consider that the commitment of a crime to the detriment of the private prosecutor was performed in that place.
The court in an order of 31 December 2008, case file V K 1595/08, referred the case to the Regional Court for Warszawa Śródmieście II Criminal Division. Interestingly, the court in Wrocław did not consider that the alleged offense was not committed.
See also “Personal rights, case I ACa 949/09“.