By order dated June 14, 2024, the Frankfurt am Main Higher Regional Court (Case No.: 6 U 14/24) addressed the question of whether railway companies may require their customers to provide an email address or mobile phone number as a mandatory prerequisite for purchasing train tickets. The court clarified that such mandatory data collection is unlawful, unless it is strictly necessary for the performance of the contract.
Facts and Background of the Legal Dispute
In the present case, a consumer protection association filed a lawsuit against a large transport company that required customers purchasing train tickets online to provide personal data—specifically an email address or mobile phone number—as mandatory information. Without entering this contact data, it was technically impossible to purchase tickets via the electronic ordering platform. The plaintiff saw in this practice, in particular, a violation of data protection regulations as well as consumer rights.
Key Statements of the Court’s Decision
From a consumer protection perspective, the Frankfurt am Main Higher Regional Court confirmed that, as a general rule, only such data may be collected for contract conclusion that is required for the fulfillment of the transportation contract and the proper handling of the booked service. The obligation to provide an email address or mobile phone number exceeds this framework if the railway company cannot demonstrate a sufficient objective reason as to why this information is absolutely necessary.
Necessity and Proportionality of Data Processing
The court clarified that, according to relevant European and national data protection regulations—in particular, the General Data Protection Regulation (GDPR)—the processing of personal data must be limited to that which is necessary for the performance of the contract. Simple ticket sales processing can be ensured without the mandatory provision of electronic contact data. Where the company cited potential customer communication—such as delay notifications—these could, if required, also be conducted on a voluntary basis.
Consequences for Ticket Sales Practices
This decision establishes high standards for data-protection-compliant design of online ordering processes. Ticket providers must now prepare to critically review data collection practices and, if necessary, make technical adjustments to their online platforms. The obligation to minimize and proportionately collect data is brought even more to the forefront. In particular, it must be considered that a mandate to disclose additional contact data cannot be justified by a company’s unilateral interests as long as alternatives for notification and payment processing exist.
Classification in the Context of Data Protection and Consumer Rights
Significance for Data Protection
The decision underscores the continued high importance of the principle of data minimization. Especially when purchasing transport services, where only minimal personal information (such as name, possibly proof of age) is necessary for the performance of the contract, further access to sensitive data must generally be viewed critically. Attempts to collect additional data as a matter of business precaution or for marketing purposes fall within a narrow regulatory framework.
Implications for Contract Design in E-Commerce
Beyond the individual case, the decision is significant for numerous e-commerce business models. The necessity of observing data protection restrictions at the stages of contract drafting and digital ordering processes is once again emphasized. Companies are obliged to precisely determine the purpose of data processing and not to impose unnecessary hurdles on end users during contract conclusion.
Notes on Ongoing Uncertainties and Pending Proceedings
It should be noted that this decision is not binding as a final ruling for all constellations of ticket sales in the transport sector or other industries. Similar cases and potential adjustments by affected companies must always be assessed on a case-by-case basis. It remains to be seen to what extent future supreme court rulings—or amendments to relevant statutory provisions—will influence the practice of data collection in sales processes.
Should questions arise regarding data processing obligations, contractual information duties, or other aspects of digital contract design in connection with this matter, the team at MTR Legal Rechtsanwalt is available to provide in-depth legal clarification.
