An Austrian bank rejects the residential loan application and cites a database disclosure. In the fictitious case the applicant remembers a debt that was long since settled, but does not know the exact stored data record or how it is being used. He now wants to apply for another loan as quickly as possible. First he needs a comprehensible status, rather than simply passing on the same unresolved information.
The article contains editorial steps for this specific situation. It does not promise deletion of lawful data, any particular score or loan approval. Data-protection and financing questions remain examinable separately.
Assign the rejection precisely
§ 9 paragraph 7 HIKrG requires information about the rejection and, where applicable, the automated processing. If the rejection is based on a database query, information must be provided about its result and the database concerned. [HIK9]
Our recommendation: Secure the notice received and, if the attribution is missing, ask specifically. Is it actually database information or was the proposal rejected for other reasons? A suspicion of the applicant is not presented as an already established error of a credit agency.
In the example Amir notes the application date, bank contact and the named body. His own recollection of the settled debt is initially given the status “to be checked”. That way he can later describe precisely which statement he disputes.
First see which data record exists
The Data Protection Authority recommends obtaining information from credit agencies first so that a subsequent request is specific. It also warns against viewing deletion of all data as an improvement in general: if even a basic data record is missing, this too can cause problems with a later request. [DSB-AUSKUNFTEI]
Amir therefore contacts the data controller actually responsible and uses the reliably identified contact channel provided for this purpose. He transmits identity information to the necessary extent, not indiscriminately to every company whose name appears in an internet search.
The information received is saved with the date. Relevant aspects are, for example, assignment to the correct person, reference to the claim and the purported settled status. The article does not claim that every older entry is unlawful solely because of its age.
Name a concrete inaccuracy with evidence
After the authority’s information, incorrect personal data can be corrected and incomplete data completed. For that purpose the affected person submits a request to the controller. The DPA recommends not requesting information and correction simultaneously so that the previous data state remains traceable for possible review. [DSB-RECHTE]
In the fictional case an item presented as outstanding actually proves to be one for which Amir has a comprehensible proof of settlement. He names the affected entry and the specific discrepancy. A generic message “My creditworthiness is wrong” would be less actionable than this assignment.
A requested correction step is not yet recorded as a completed change. Amir keeps receipt, response and the actual result apart. Where a requested correction is not carried out the DPA describes the possibility of a data-protection complaint. [DSB-RECHTE] Which further legal questions the specific data record raises must, if necessary, be examined separately.
The bank’s assessment remains a separate decision
Under § 9 HIKrG, among other things income, expenses and other financial circumstances belong in the creditworthiness assessment. Granting a loan requires the legally described probable fulfilment of the credit obligations. [HIK9] A corrected data error therefore does not automatically turn an otherwise unviable financing plan into an approved application.
Amir clarifies with the bank which current documents and which confirmed data state are needed for a renewed consideration. His household calculation remains complete; he does not conceal existing instalments simply because he has disputed another entry.
Do not base the property timeline on a hoped-for outcome
If a property offer is on the table, its actual deadlines are observed in parallel. Amir does not present an outstanding data check as a secure financing commitment to the seller. Whether a binding agreement can be postponed or arranged differently must be clarified for the specific purchase.
The usable result consists of three separate answers: which data state exists, which concrete change has actually occurred and how the bank assesses the entire proposal thereafter? That way a possible inaccuracy remains verifiable without portraying data-protection rights as a shortcut to an unexamined financing.