1. Home
  2. News
  3. Asking about gender violates the GDPR
  • Data Protection

Asking about gender violates the GDPR

The European Court of Justice (ECJ) has ruled that asking people's gender when purchasing a ticket is in breach of the GDPR. According to the principle of data minimisation, only data that is objectively necessary to provide the service may be collected when concluding a contract. This does not include gender, as it is irrelevant for the purchase or use of tickets.

Background to the case

The French association Mousse, which campaigns against sexual discrimination, had lodged a complaint against the railway company SNCF Connect. When purchasing tickets online, customers had to choose between ‘Monsieur’ (Mr) and ‘Madame’ (Mrs), without a gender-neutral option. After the complaint was rejected by the French data protection authority (CNIL) and subsequent legal dispute up to the ECJ, the latter ruled in favour of the association.

Decision of the ECJ

The ECJ found that the gender query was not ‘objectively indispensable’ for the fulfilment of the contract. A gender-neutral form of address such as ‘Hello [first name] [surname]’ was a practicable and realisable alternative. The case was referred back to the French court to make a judgement in line with the legal opinion of the ECJ.

Effects and similar cases

There have already been decisions in similar cases in Germany. For example, the Frankfurt Higher Regional Court awarded a non-binary person compensation of 1,000 euros because Deutsche Bahn did not offer a gender-neutral form of address.

Recommendations for action

As an online retailer, you should check whether it is necessary to query the gender in your shop. In order to avoid discrimination and legal consequences, either the query can be omitted or a gender-neutral alternative can be offered. For example, communication could take place with ‘Hello [first name] [surname]’ in order to address everyone respectfully and in compliance with data protection regulations.

Source:www.onlinehaendler-news.de

About Cookies

This website uses cookies. Those have two functions: On the one hand they are providing basic functionality for this website. On the other hand they allow us to improve our content for you by saving and analyzing anonymized user data. You can redraw your consent to to using these cookies at any time. Find more information regarding cookies on our Data Protection Declaration and regarding us on the Imprint.
Mandatory

These cookies are needed for a smooth operation of our website.

Name Purpose Lifetime Type Provider
CookieConsent Saves your consent to using cookies. 1 year HTML Website
fe_typo_user Assigns your browser to a session on the server. session HTTP Website
PHPSESSID Temporary cookies which is required by PHP to temporarily store data. session HTTP Website
__cfduid missing translation: trackingobject.__cfduid.desc 30 missing translation: duration.days-session HTTP Cloudflare/ report-uri.com
Statistics

With the help of these statistics cookies we check how visitors interact with our website. The information is collected anonymously.

Name Purpose Lifetime Type Provider
_pk_id Used to store a few details about the user such as the unique visitor ID. 13 months HTML Matomo
_pk_ref Used to store the attribution information, the referrer initially used to visit the website. 6 months HTML Matomo
_pk_ses Short lived cookie used to temporarily store data for the visit. 30 minutes HTML Matomo
_pk_cvar Short lived cookie used to temporarily store data for the visit. 30 minutes HTML Matomo
MATOMO_SESSID Temporary cookies which is set when the Matomo Out-out is used. session HTTP Matomo
_pk_testcookie missing translation: trackingobject._pk_testcookie.desc session HTML Matomo