The data subjects complained that the bank with which they’d concluded a credit agreement had sold its claim to a third party while also transferring the relevant personal data to the third-party company (controller). The NAIH determined that the data controller can’t rely on the performance of the credit contract or the consent of the data subjects for the data processing since the data subjects had concluded this contract with the bank, not with the data controller. Thus, the data controller has no legal basis for the data processing.
the data subjects complained that the bank with which they’d concluded a credit agreement had sold its claim to a third party while also transferring the relevant personal data to the thirdparty company controller the naih determined that the data controller can’t rely on the performance of the credit contract or the consent of the data subjects for the data processing since the data subjects had concluded this contract with the bank not with the data controller thus the data controller has no legal basis for the data processing
 data subject complain   bank   ’ conclude  credit agreement  sell  claim   third party  also transfer  relevant personal data   thirdparty company controller  naih determine   data controller ’ rely   performance   credit contract   consent   data subject   data process since  data subject  conclude  contract   bank    data controller thus  data controller   legal basis   data process