Contents
Judgment of the Court (Second Chamber)27 September 2017note(Reference for a preliminary ruling — Charter of Fundamental Rights of the European Union — Articles 7, 8 and 47 — Directive 95/46/EC — Articles 1, 7 and 13 — Processing of personal data — Article 4(3) TEU — Drawing up of a list of personal data — Subject matter — Tax collection — Fight against tax fraud — Judicial review — Protection of fundamental rights and freedoms — Legal action dependent on a requirement of a prior administrative complaint — Whether that list is permissible as evidence — Rules on the lawfulness of the processing of personal data — Performance of a task carried out in the public interest by the controller)In Case C‑73/16,REQUEST for a preliminary ruling under Article 267 TFEU from the Najvyšší súd Slovenskej republiky (Supreme Court of the Slovak Republic), made by decision of 3 February 2016, received at the Court on 10 February 2016, in the proceedingsPeter PuškárvFinančné riaditeľstvo Slovenskej republiky,Kriminálny úrad finančnej správy,THE COURT (Second Chamber),composed of M. Ilešič, President of the Chamber, A. Prechal, A. Rosas (Rapporteur), C. Toader and E. Jarašiūnas, Judges,Advocate General: J. Kokott,Registrar: M. Aleksejev, Administrator,having regard to the written procedure and further to the hearing on 16 February 2017,after considering the observations submitted on behalf of:– Mr Puškár, by M. Mandzák, advokát,– the Slovak Government, by B. Ricziová, acting as Agent,– the Czech Government, by M. Smolek and J. Vláčil, acting as Agents,– the Spanish Government, by M.J. García-Valdecasas Dorrego, acting as Agent,– the Italian Government, by G. Palmieri, acting as Agent, and by P. Gentili, avvocato dello Stato,– the Polish Government, by B. Majczyna, acting as Agent,– the European Commission, by H. Krämer, A. Tokár and H. Kranenborg, acting as Agents,after hearing the Opinion of the Advocate General at the sitting on 30 March 2017,gives the following
Judgment
1This request for a preliminary ruling concerns the interpretation of Articles 7, 8 and 47 of the Charter of Fundamental Rights of the European Union (‘the Charter’), of Article 1(1), of Article 7(e) and of Article 13(1)(e) and (f) of Directive 95/46/EC of the European Parliament and of the Council of 24 October 1995 on the protection of natural persons with regard to the processing of personal data and on the free movement of such data (OJ 1995 L 281, p. 31), and of Article 4(3) TEU and of Article 267 TFEU.
2The request has been made in proceedings between, on the one hand, Mr Peter Puškár and the Finančné riaditel’stvo Slovenskej republiky (Finance Directorate of the Slovak Republic, ‘the Finance Directorate’) and, on the other, the Kriminálny úrad finančnej správy (Financial Administration Criminal Office, Slovakia) concerning an action seeking to order the latter to remove Mr Puškár’s name from a list of persons considered by the Finance Directorate to be ‘front-men’, drawn up by the latter in the context of tax collection and the updating of which is carried out by the Finance Directorate, the tax offices subordinate to it and the Financial Administration Criminal Office (‘the contested list’).
Legal context
EU law
3Article 1 of Directive 95/46 provides:1. In accordance with this Directive, Member States shall protect the fundamental rights and freedoms of natural persons, and in particular their right to privacy with respect to the processing of personal data.2. Member States shall neither restrict nor prohibit the free flow of personal data between Member States for reasons connected with the protection afforded under paragraph 1.’
4Article 2 of that directive provides:‘For the purposes of this Directive:(a) “Personal data” shall mean any information relating to an identified or identifiable natural person (“data subject”); an identifiable person is one who can be identified, directly or indirectly, in particular by reference to an identification number or to one or more factors specific to his physical, physiological, mental, economic, cultural or social identity;(b) “processing of personal data” (“processing”) shall mean any operation or set of operations which is performed upon personal data, whether or not by automatic means, such as collection, recording, organisation, storage, adaptation or alteration, retrieval, consultation, use, disclosure by transmission, dissemination or otherwise making available, alignment or combination, blocking, erasure or destruction;…(d) “controller” shall mean the natural or legal person, public authority, agency or any other body which alone or jointly with others determines the purposes and means of the processing of personal data; where the purposes and means of processing are determined by national or Community laws or regulations, the controller or the specific criteria for his nomination may be designated by national or Community law;…’
5Article 3 of Directive 95/46, entitled ‘Scope’, provides:1. This Directive applies to the processing of personal data wholly or partly by automated means, and to the processing other than by automated means of personal data which form part of a filing system or are intended to form part of a filing system.2.This Directive shall not apply to the processing of personal data:– in the course of an activity which falls outside the scope of Community law, such as those provided for by Titles V and VI of the Treaty on European Union and in any case to processing operations concerning public security, defence, State security (including the economic well-being of the State when the processing operation relates to State security matters) and the activities of the State in areas of criminal law,…’
6Article 6 of that directive provides:1.Member States shall provide that personal data must be:(a) processed fairly and lawfully;(b) collected for specified, explicit and legitimate purposes and not further processed in a way incompatible with those purposes. Further processing of data for historical, statistical or scientific purposes shall not be considered as incompatible provided that Member States provide appropriate safeguards;(c) adequate, relevant and not excessive in relation to the purposes for which they are collected and/or further processed;(d) accurate and, where necessary, kept up to date; every reasonable step must be taken to ensure that data which are inaccurate or incomplete, having regard to the purpose for which they were collected or for which they are further processed, are erased or rectified;(e) kept in a form which permits identification of data subjects for no longer than is necessary for the purposes for which the data were collected or for which they are further processed. Member States must lay down appropriate safeguards for personal data stored for longer periods for historical, statistical or scientific use.2. It shall be for the controller to ensure that paragraph 1 is complied with.’
7Article 7 of that directive is worded as follows:‘Member States shall provide that personal data may be processed only if:(a) the data subject has unambiguously given his consent; or…(c) processing is necessary for compliance with a legal obligation to which the controller is subject; or…(e) processing is necessary for the performance of a task carried out in the public interest or in the exercise of official authority vested in the controller or in a third party to whom the data are disclosed; or(f) processing is necessary for the purposes of the legitimate interests pursued by the controller or by the third party or parties to whom the data are disclosed, except where such interests are overridden by the interests or fundamental rights and freedoms of the data subject which require protection under Article 1(1).’
8Article 10 of Directive 95/46 provides:‘Member States shall provide that the controller or his representative must provide a data subject from whom data relating to himself are collected with at least the following information, except where he already has it:(a) the identity of the controller and of his representative, if any;(b) the purposes of the processing operation for which the data are intended;(c) any further information such as:– the recipients or categories of recipients,– whether replies to the questions are obligatory or voluntary, as well as the possible consequences of failure to reply,– the existence of the right of access to and the right to rectify the data concerning him or her,in so far as such further information is necessary, having regard to the specific circumstances in which the data are collected, to guarantee fair processing in respect of the data subject.’
9Article 11 of that directive states:1.Where the data have not been obtained from the data subject, Member States shall provide that the controller or his representative must at the time of undertaking the recording of personal data or if a disclosure to a third party is envisaged, no later than the time when the data are first disclosed provide the data subject with at least the following information, except where he already has it:(a) the identity of the controller and of his representative, if any;(b) the purposes of the processing;(c) any further information such as:– the categories of data concerned,– the recipients or categories of recipients,– the existence of the right of access to and the right to rectify the data concerning him or her,in so far as such further information is necessary, having regard to the specific circumstances in which the data are collected, to guarantee fair processing in respect of the data subject.…’
10Article 12 of that directive provides:‘Member States shall guarantee every data subject the right to obtain from the controller:(a) without constraint, at reasonable intervals and without excessive delay or expense:– confirmation as to whether or not data relating to him are being processed and information at least as to the purposes of the processing, the categories of data concerned, and the recipients or categories of recipients to whom the data are disclosed,– communication to him in an intelligible form of the data undergoing processing and of any available information as to their source,– knowledge of the logic involved in any automatic processing of data concerning him at least in the case of the automated decisions referred to in Article 15(1);(b) as appropriate the rectification, erasure or blocking of data the processing of which does not comply with the provisions of this Directive, in particular because of the incomplete or inaccurate nature of the data;(c) notification to third parties to whom the data have been disclosed of any rectification, erasure or blocking carried out in compliance with (b), unless this proves impossible or involves a disproportionate effort.’
11Article 13(1) of Directive 95/46 provides:‘Member States may adopt legislative measures to restrict the scope of the obligations and rights provided for in Articles 6(1), 10, 11(1), 12 and 21 when such a restriction constitutes a necessary measure to safeguard:…(c) public security;(d) the prevention, investigation, detection and prosecution of criminal offences, or of breaches of ethics for regulated professions;(e) an important economic or financial interest of a Member State or of the European Union, including monetary, budgetary and taxation matters;(f) a monitoring, inspection or regulatory function connected, even occasionally, with the exercise of official authority in cases referred to in (c), (d) and (e);…’
12Article 14 of Directive 95/46 provides:‘Member States shall grant the data subject the right:(a) at least in the cases referred to in Article 7(e) and (f), to object at any time on compelling legitimate grounds relating to his particular situation to the processing of data relating to him, save where otherwise provided by national legislation. Where there is a justified objection, the processing instigated by the controller may no longer involve those data;…’
13Article 17(1) of that directive provides as follows:1. Member States shall provide that the controller must implement appropriate technical and organi[s]ational measures to protect personal data against accidental or unlawful destruction or accidental loss, alteration, unauthorised disclosure or access, in particular where the processing involves the transmission of data over a network, and against all other unlawful forms of processing.Having regard to the state of the art and the cost of their implementation, such measures shall ensure a level of security appropriate to the risks represented by the processing and the nature of the data to be protected.’
14Article 22 of the directive is worded as follows:‘Without prejudice to any administrative remedy for which provision may be made, inter alia before the supervisory authority referred to in Article 28, prior to referral to the judicial authority, Member States shall provide for the right of every person to a judicial remedy for any breach of the rights guaranteed him by the national law applicable to the processing in question.’
15Article 94 of the Rules of Procedure of the Court of Justice states:‘In addition to the text of the questions referred to the Court for a preliminary ruling, the request for a preliminary ruling shall contain:(a) a summary of the subject-matter of the dispute and the relevant findings of fact as determined by the referring court or tribunal, or, at least, an account of the facts on which the questions are based;(b) the tenor of any national provisions applicable in the case and, where appropriate, the relevant national case-law;(c) a statement of the reasons which prompted the referring court or tribunal to inquire about the interpretation or validity of certain provisions of European Union law, and the relationship between those provisions and the national legislation applicable to the main proceedings.’
Slovak law
16Article 19(3) of the Constitution of the Slovak Republic (‘the Constitution’), which forms part of the section entitled ‘Fundamental Principles’, provides:‘Everyone shall have the right to be protected against unjustified collection, disclosure and other misuse of his or her personal data.’
17Article 46(2) and (4) of the Constitution states:2. Any person who considers that the decision of a body of a public authority has adversely affected his rights may take legal action before the court or tribunal with jurisdiction so that it may review the legality of the decision unless otherwise provided for by law. However, review of decisions affecting fundamental rights and freedoms cannot be excluded from the jurisdiction of the court or tribunal.…4. The conditions and procedures for judicial protection and all other forms of legal protection shall be established by law.’
18Paragraph 3(1) of Law No 9/2010 on Administrative Complaints reads as follows:‘An administrative complaint is an act by means of which an individual or a legal person …:(a) asserts the protection of his rights or legally protected interests, which he considers to have been infringed by the activity or failure to act … of a body of public administration,(b) alleges specific faults, in particular the infringement of legislation, which the body of public administration has the power to remedy.’
19The second sentence of Paragraph 135(1) of the Code of Civil Procedure, in the version applicable to the dispute in the main proceedings, provides:‘The court shall also be bound by any decision of the Ústavný súd [Slovenskej republiky] (Constitutional Court of the Slovak Republic) and of the European Court of Human Rights concerning fundamental human rights and freedoms.’
20Under Paragraph 250v(1) and (3) of the Code of Civil Procedure:1. Individuals or legal persons who claim that their rights or legally protected interests have been harmed by the unlawful action of a public authority, which does not constitute a decision, and that they were the direct addressee of that action or that its effects directly prejudiced them, may apply for protection against the action before a court, provided such action or its effects persist or may recur.…3. Legal proceedings shall be inadmissible unless the claimant has exhausted the remedies available to him under specific legislation …’
21Paragraph 164 of Law No 563/2009 on tax administration (‘the Tax Code’), in the version applicable to the case in the main proceedings, provides:‘For the purposes of tax administration, the tax authorities, Financial Directorate and Ministry of Finance shall be authorised to process the personal data of taxpayers, the representatives of taxpayers and other persons in accordance with specific legislation …; personal data may be made accessible only to the municipality in its capacity as the tax authorities, the Financial Administration and the Ministry of Finance and, in connection with tax administration and the performance of their tasks under specific legislation …, to any other person, court or prosecution authority. In the information systems … it is permissible to process the name and surname of an individual, his or her permanent address and, if he or she was not allocated a tax identification number on registration, his or her national identity number.’
22Paragraph 8 of Law No 479/2009 on State Administrative Bodies in the field of Taxes and Fees reads as follows:‘The Financial Directorate and Financial Administration shall be authorised to process personal data, in accordance with specific legislation … concerning individuals affected by acts adopted by the Financial Administration in connection with performance of its tasks under the present law or specific legislation; (1) the register of personal data is set out in the annex.’
23Paragraph 4(3)(d), (e) and (o) of Law No 333/2011 on State Administrative Bodies in the field of Taxes, Fees and Customs provides:3.The Finance Directorate shall perform the following tasks:…(d) it shall create, develop and operate the Financial Administration information systems … it shall notify to the Ministry of Finance its intention to carry out activities in relation to the creation and development of the Financial Administration information systems,(e) it shall create and keep a central list of economic operators and other persons engaged in activities governed by the customs legislation and ensure that it is aligned with the relevant lists of the European Commission; it shall create and keep a central list of taxpayers and maintain and update the database; it shall create and keep that list through the Financial Administration information system,…(o) it shall inform persons about their rights and obligations in matters concerning taxes and fees and their rights and obligations under specific legislation.’
24Pursuant to Paragraph 5(3) of Law 333/2011:‘The Financial Administration Criminal Office shall use the Financial Administration information systems, in which it shall collect, process, maintain, transfer, use, protect and delete information and personal data … about persons who have infringed the tax or customs legislation or who are suspected, on reasonable grounds, of infringing the tax or customs legislation, or persons who, within the Financial Administration’s field of jurisdiction, have undermined public order or who are suspected, on reasonable grounds, of undermining public order, and any other information on such infringements of the tax or customs legislation or undermining of public order; it shall provide or disclose that information and personal data to the Financial Directorate, the tax office or the customs office to the extent required for those bodies to carry out their tasks.’
The dispute in the main proceedings and the questions referred for a preliminary ruling
25Believing himself to be a victim of an infringement of his rights relating to personality by the inclusion of his name on the contested list, Mr Puškár applied to the Najvyšší súd Slovenskej republiky (Supreme Court of the Slovak Republic), by an action of 9 January 2014, followed by an appeal of 19 November 2014, to order the Finance Directorate, all tax offices under its control and the Financial Administration Criminal Office not to include his name on the contested list or any other similar list and to delete any reference to him from those lists and from the finance authority’s IT system.
26According to Mr Puškár, the Finance Directorate and the Financial Administration Criminal Office have drawn up and are using the contested list, a list of natural persons, numbering 1227 according to Mr Puškár, which the public authorities refer to by the expression ‘biele kone’ (‘white horses’). That expression is used for persons acting as ‘fronts’ in company director roles. Each natural person is, in principle, together with his national identity number and a tax identification number, associated with a legal person or legal persons — of which there are 3369, according to Mr Puškár’s indications — within which he is deemed to be performing duties during a determined period.
27The referring court states that the existence of the contested list has been confirmed by the Financial Administration Criminal Office, which submits, however, that this list was drawn up by the Finance Directorate.
28According to the referring court, the contested list is protected against ‘unauthorised disclosure or access’ within the meaning of Article 17(1) of Directive 95/46, by appropriate technical and organisational measures. Nevertheless, neither in his pleadings nor at the hearing, did Mr Puškár claim that he had obtained the contested list with the consent legally required by the Finance Directorate or, where appropriate, the Financial Administration Criminal Office.
29It is apparent from the order for reference that the Najvyšší súd Slovenskej republiky (Supreme Court of the Slovak Republic) has dismissed as unfounded the actions brought by Mr Puškár and two other persons included on the contested list on procedural grounds, namely the fact that those applicants had not exhausted the remedies before the national administrative authorities, or on substantive grounds.
30Following the subsequent constitutional appeals lodged by Mr Puškár and those two other persons, the Ústavný súd Slovenskej republiky (Constitutional Court of the Slovak Republic), relying in particular on the case-law of the European Court of Human Rights, held that, in so doing, the Najvyšší súd Slovenskej republiky (Supreme Court of the Slovak Republic) had infringed several of those applicants’ fundamental rights, namely, inter alia, the right to a fair trial, the right to privacy as well as the right to the protection of personal data. Consequently, the Ústavný súd Slovenskej republiky (Constitutional Court of the Slovak Republic) set aside all of the judgments at issue of the Najvyšší súd Slovenskej republiky (Supreme Court of the Slovak Republic) and referred the cases back to that court so that it would rule again, reminding it that it was bound by the case-law of the European Court of Human Rights on the protection of personal data.
31According to the Najvyšší súd Slovenskej republiky (Supreme Court of the Slovak Republic), the Ústavný súd Slovenskej republiky (Constitutional Court of the Slovak Republic) did not take into account the relevant case-law of the Court of Justice on the application of EU law on the protection of personal data.
32In those circumstances, the Najvyšší súd Slovenskej republiky (Supreme Court of the Slovak Republic) decided to stay the proceedings and to refer the following questions to the Court of Justice for a preliminary ruling:(1) Does Article 47(1) of the Charter, under which every person whose rights — including the right to privacy with respect to the processing of personal data in Article 1(1) et seq. of Directive 95/46 — are violated has the right to an effective remedy before a court in compliance with the conditions in Article 47 of the Charter, against a provision of national law which makes the exercise of an effective remedy before a court, meaning an administrative court, conditional on the fact that the claimant, to protect his rights and freedoms, must have previously exhausted the procedures available under lex specialis — law on a specific subject — such as the Slovak Law on administrative complaints?(2) Can the right to respect for private and family life, home and communications, in Article 7 of the Charter, and the right to the protection of personal data in Article 8 be interpreted to the effect that where there is an alleged violation of the right to the protection of personal data, which, with respect to the European Union, is implemented primarily through Directive 95/46, and under which, in particular– the Member States must protect the right to privacy with respect to the processing of personal data (Article [1](1)), and– the Member States are authorised to process personal data where this is necessary for the implementation of a task performed in the public interest (Article 7(e)) or is necessary for the purpose of a legitimate interests that is performed by the responsible authority or by the third party or parties to whom the data are disclosed, and– a Member State is exceptionally authorised to limit obligations and rights (Article 13(1)(e) and (f)), where such a restriction is necessary to safeguard an important economic or financial interest of a Member State or of the European Union, including monetary, budgetary and taxation matters,are interpreted in such a way as not to allow a Member State to create, without the consent of the person concerned, a list of personal data for the purposes of tax administration, so that the fact that personal data is made available to a public authority for the purpose of combating tax fraud in itself constitutes a risk?(3) Can a list held by a financial authority of a Member State, which contains the claimant’s personal data and the inaccessibility of which has been secured by appropriate technical and organisational measures for the protection of personal data against unauthorised disclosure or access within the meaning of Article 17(1) of Directive 95/46, be regarded as unlawful evidence by virtue of the fact that it was obtained by the claimant without the lawful agreement of the relevant financial authority, which the referring court must refuse to admit in accordance with the requirements of EU law on a fair hearing in the second paragraph of Article 47(2) of the Charter?(4) Is the abovementioned right to an effective legal remedy and to a fair hearing (in particular under Article 47 of the Charter) consistent with an approach taken by the referring court whereby, when, in this case, there is case-law from the European Court of Human Rights which differs from the answer obtained from the Court of Justice of the European Union, the referring court, in accordance with the principle of sincere cooperation in Article 4(3) TEU and Article 267 TFEU, gives precedence to the Court of Justice’s legal approach?’
Consideration of the questions referred
Preliminary observations
33It must be held at the outset, on the basis of the information provided by the referring court, that the data included on the contested list, namely, inter alia, the names of some natural persons, including Mr Puškár, are ‘personal data’ within the meaning of Article 2(a) of the Directive 95/46, since they are ‘information relating to an identified or identifiable natural person’ (see, to that effect, judgments of 16 December 2008, Satakunnan Markkinapörssi and Satamedia, C‑73/07, EU:C:2008:727, paragraph 35, and of 1 October 2015, Bara and Others, C‑201/14, EU:C:2015:638, paragraph 29).
34Both their collection and their use by the various tax authorities at issue in the case in the main proceedings therefore constitute ‘processing of personal data’ within the meaning of Article 2(b) of that directive (see, to that effect, judgments of 20 May 2003, Österreichischer Rundfunk and Others, C‑465/00, C‑138/01 and C‑139/01, EU:C:2003:294, paragraph 64; of 16 December 2008, Huber, C‑524/06, EU:C:2008:724, paragraph 43; and of 1 October 2015, Bara and Others, C‑201/14, EU:C:2015:638, paragraph 29).
35The Spanish Government claims, however, that that processing of personal data is excluded from the scope of Directive 95/46 pursuant to the first indent of Article 3(2) thereof, under which that directive does not apply, in any case, to processing operations of personal data concerning public security, defence, State security, including the economic well-being of the State when the processing operation relates to State security matters, and the activities of the State in areas of criminal law.
36In that regard, it should be borne in mind that the activities which are mentioned by way of example in that article are, in any event, activities of the State or of State authorities unrelated to the fields of activity of individuals (see judgments of 6 November 2003, Lindqvist, C‑101/01, EU:C:2003:596, paragraph 43, and of 16 December 2008, Satakunnan Markkinapörssi and Satamedia, C‑73/07, EU:C:2008:727, paragraph 41).
37The Court has also considered that the activities mentioned by way of example in the first indent of Article 3(2) of Directive 95/46 are intended to define the scope of the exception which is provided for there, with the result that that exception applies only to the activities which are expressly listed there or which can be classified in the same category (see judgment of 6 November 2003, Lindqvist, C‑101/01, EU:C:2003:596, paragraph 44).
38In so far as it renders inapplicable the system of protection of personal data provided for in Directive 95/46 and thus deviates from the objective underlying it, namely to ensure the protection of the fundamental rights and freedoms of natural persons with regard to the processing of personal data, the exception provided for in the first indent of Article 3(2) of that directive must be interpreted strictly.
39In the case in the main proceedings it is apparent from the order for reference that the data at issue are collected and used for the purpose of collecting tax and combating tax fraud. Subject to the determinations to be carried out in that regard by the referring court, however, it does not appear that the processing of that data has as its object public security, defence or State security.
40Besides, even if it does not appear to be excluded that that data may be used in criminal proceedings which may be brought, in the event of an infringement in the field of taxation, against certain persons whose names are included in the contested list, the data at issue in the case in the main proceedings do not appear to have been collected for the specific purpose of the pursuit of such criminal proceedings or in the context of State activities relating to areas of criminal law.
41Moreover, it is clear from the case-law of the Court that tax data constitute ‘personal data’ within the meaning of Article 2(a) of Directive 95/46 (see, to that effect, judgment of 1 October 2015, Bara and Others, C‑201/14, EU:C:2015:638, paragraph 29).
42In that context, it should be noted that Article 13(1)(e) of Directive 95/46 authorises the Member States to take legislative measures to limit the scope of the obligations and rights provided for in Article 6(1), Article 10, Article 11(1) and Articles 12 and 21 of that directive where such a restriction constitutes a measure necessary to safeguard an important economic or financial interest of a Member State or of the European Union, including monetary, budgetary and taxation matters. A limitation of the data protection provided by Directive 95/46 for tax purposes is accordingly expressly provided for in that directive.
43Article 13(1) of Directive 95/46 necessarily presupposes that the national measures referred to therein, such as those necessary to safeguard an important economic or financial interest of a Member State in the field of taxation, fall within the scope of that directive (see, by analogy, judgment of 21 December 2016, Tele2 Sverige and Watson and Others, C‑203/15 and C‑698/15, EU:C:2016:970, paragraph 73).
44It follows from the foregoing that, subject to the determinations to be carried out by the referring court, processing of personal data, such as that at issue in the case in the main proceedings, falls within the scope of Directive 95/46.
The first question
45By its first question, the referring court asks, in essence, whether Article 47 of the Charter must be interpreted as precluding national legislation, which makes the exercise of a judicial remedy by a person stating that his right to protection of personal data guaranteed by Directive 95/46 has been infringed, subject to the prior exhaustion of the remedies available to him before the national administrative authorities (‘the available administrative remedies’).
Admissibility
46Mr Puškár and the Slovak Government dispute the admissibility of the first question referred.
47Mr Puškár claims, in particular, that that question is hypothetical in so far as, following the dismissal by the referring court of his first action on the ground that he had not lodged an administrative complaint, he had exhausted, prior to his second appeal before that court, all possible prior remedies.
48Similarly, the Slovak Government points out that the order for reference mentions at least two proceedings initiated by Mr Puškár, without specifying which of them is the subject of the present reference for a preliminary ruling. It claims that the information contained in the order for reference does not make it possible to determine whether a complaint had been lodged under Law No 9/2010, in which case the first question referred for a preliminary ruling would be inadmissible because of its hypothetical nature.
49In that regard, it must be borne in mind that, according to the Court’s settled case-law, in the context of the cooperation between the Court and the national courts provided for in Article 267 TFEU, it is solely for the national court before which the dispute has been brought, and which must assume responsibility for the subsequent judicial decision, to determine, in the light of the particular circumstances of the case, both the need for a preliminary ruling in order to enable it to deliver judgment and the relevance of the questions which it submits to the Court. Consequently, where the questions submitted concern the interpretation of EU law, the Court is, in principle, bound to give a ruling (see, in particular, judgment of 26 April 2017, Stichting Brein, C‑527/15, EU:C:2017:300, paragraph 55 and the case-law cited).
50Questions on the interpretation of EU law referred by a national court in the factual and legislative context which that court is responsible for defining, and the accuracy of which is not a matter for the Court to determine, enjoy a presumption of relevance (see judgment of 17 July 2014, YS and Others, C‑141/12 and C‑372/12, EU:C:2014:2081, paragraph 63). The Court may refuse to rule on a question referred for a preliminary ruling by a national court only where it is quite obvious that the interpretation of EU law that is sought is unrelated to the actual facts of the main action or its purpose, where the problem is hypothetical, or where the Court does not have before it the factual or legal material necessary to give a useful answer to the questions submitted to it (see, in particular, judgment of 26 April 2017, Stichting Brein, C‑527/15, EU:C:2017:300, paragraph 56 and the case-law cited).
51However, that is not the case here. As was pointed out in paragraphs 29 and 30 of the present judgment, it is clear from the order for reference that the Najvyšší súd Slovenskej republiky (Supreme Court of the Slovak Republic) had initially rejected the actions brought by Mr Puškár and two other persons on the ground, inter alia, that they had not exhausted the available administrative remedies, and that those decisions were annulled by the Ústavný súd Slovenskej republiky (Constitutional Court of the Slovak Republic).
52In those circumstances, it is not obvious that the interpretation of EU law sought by the referring court bears no relation to the actual facts of the main action or its purpose.
53It follows that the first question is admissible.
Substance
54Article 22 of Directive 95/46 requires specifically that Member States shall provide for the right of every person to a judicial remedy for any breach of the rights guaranteed him by the national law applicable to the processing of personal data in question.
55That directive, which does not contain any provisions governing specifically the conditions under which that remedy may be exercised, does not however exclude the possibility that national law may also establish remedies before the administrative authorities. On the contrary, it should be pointed out that Article 22 expressly states that it is ‘without prejudice to any administrative remedy for which provision may be made, inter alia before the supervisory authority referred to in Article 28 [of Directive 95/46], prior to referral to the judicial authority’, that Member States are to provide for the right of every person to that judicial remedy.
56However, it is necessary to determine whether Article 47 of the Charter precludes a Member State from providing that the exhaustion of available administrative remedies is a prerequisite for bringing such a judicial remedy.
57It should be recalled that, according to settled case-law of the Court, under the principle of sincere cooperation laid down in Article 4(3) TEU it is for the courts of the Member States to ensure judicial protection of a person’s rights under EU law, in addition, Article 19(1) TEU requiring Member States to provide remedies sufficient to ensure effective judicial protection in the fields covered by EU law (see, inter alia, judgments of 8 November 2016, Lesoochranárske zoskupenie VLK, C‑243/15, EU:C:2016:838, paragraph 50, and of 26 July 2017, Sacko, C‑348/16, EU:C:2017:591, paragraph 29).
58That requirement on the part of the Member States corresponds to the right enshrined in Article 47 of the Charter, entitled ‘Right to an effective remedy and to a fair trial’, which provides that everyone whose rights and freedoms guaranteed by the law of the Union are violated has the right to an effective remedy before a tribunal (see, to that effect, judgment of 16 May 2017, Berlioz Investment Fund, C‑682/15, EU:C:2017:373, paragraph 44, and of 26 July 2017, Sacko, C‑348/16, EU:C:2017:591, paragraph 30).
59It follows that, when they set out detailed procedural rules for legal actions intended to ensure the protection of rights conferred by Directive 95/46, the Member States must ensure compliance with the right to an effective remedy and to a fair hearing, enshrined in Article 47 of the Charter, which constitutes a reaffirmation of the principle of effective judicial protection (see, to that effect, judgments of 15 September 2016, Star Storage and Others, C‑439/14 and C‑488/14, EU:C:2016:688, paragraph 46, and of 26 July 2017, Sacko, C‑348/16, EU:C:2017:591, paragraph 31).
60It follows that the characteristics of the remedy provided for in Article 22 of Directive 95/46 must be determined in a manner that is consistent with Article 47 of the Charter (see, by analogy, judgments of 17 December 2015, Tall, C‑239/14, EU:C:2015:824, paragraph 51, and of 26 July 2017, Sacko, C‑348/16, EU:C:2017:591, paragraph 31).
61In the present case, it is common ground in the case in the main proceedings that, by making the admissibility of a legal action brought by a person alleging infringement of his right to protection of personal data guaranteed by Directive 95/46 subject to the prior exhaustion of the administrative remedies available, the national legislation at issue introduces an additional step for access to the courts. As the Advocate General also stated in point 53 of her Opinion, such a procedural rule would delay access to a judicial remedy and could also cause additional costs to be incurred.
62The obligation to exhaust additional administrative remedies thereby constitutes, as a precondition for bringing a legal action, a limitation on the right to an effective remedy before a court within the meaning of Article 47 of the Charter which, in accordance with Article 52(1) of the Charter can therefore be justified only if it is provided for by law, if it respects the essence of that right and, subject to the principle of proportionality, if it is necessary and genuinely meets objectives of general interest recognised by the EU or the need to protect the rights and freedoms of others (see, to that effect, judgment of 15 September 2016, Star Storage and Others, C‑439/14 and C‑488/14, paragraph 49).
63It must be held that, in the case in the main proceedings, it is clear from the order for reference that the legal basis for the obligation to exhaust available administrative remedies is set out in Paragraph 250v(3) of the Code of Civil Procedure, in such a way that it must be regarded as being provided for by national law (see, to that effect, judgment of 15 September 2016, Star Storage and Others, Case C‑439/14 and C‑488/14, paragraph 50 and the case-law cited).
64Moreover, that obligation respects the essential content of the fundamental right to effective judicial protection, as enshrined in Article 47 of the Charter. That obligation does not call into question that right as such. An additional procedural step is merely imposed in order to exercise it.
65Nonetheless, it must still be determined whether the obligation to exhaust available administrative remedies corresponds to an objective in the general interest and whether, in the affirmative, it complies with the principle of proportionality within the meaning of Article 52(1) of the Charter.
66It is clear from the order for reference and from the observations of the Slovak Government that the reasons for the mandatory introduction of an administrative complaint before bringing a legal action are linked, first, to the administrative authority, if it accepts the applicant’s arguments, to remedy more quickly an unlawful situation when it finds that the complaint is well founded, and to avoid seeing unexpected actions brought against that authority in court. Second, those reasons relate to the fact that such an obligation contributes to the efficiency of the judicial procedure where that authority does not share the applicant’s opinion and where the latter then lodges a legal action, because the judge can then rely on the existing administrative record.
67Thus it appears that the obligation to exhaust available administrative remedies is intended to relieve the courts of disputes which can be decided directly before the administrative authority concerned and to increase the efficiency of judicial proceedings as regards disputes in which a legal action is brought despite the fact that a complaint has already been lodged. The obligation therefore pursues legitimate general interest objectives.
68As is clear from point 62 of the Advocate General’s Opinion, the obligation to exhaust the available administrative remedies appears appropriate for achieving those objectives, no less onerous method than that obligation suggesting itself as capable of realising those objectives as efficiently.
69Moreover, it is not evident that any disadvantages caused by the obligation to exhaust available administrative remedies are clearly disproportionate to those objectives (see, by analogy, judgment of 18 March 2010, Alassini and Others, C‑317/08 to C‑320/08, EU:C:2010:146, paragraph 65).
70In that regard, it should be recalled that the Court held that the principle of effective judicial protection, reaffirmed in Article 47 of the Charter, did not preclude national legislation making the application of legal action in the field of electronic communications and consumer services subject to the prior implementation of out-of-court conciliation and mediation procedures provided that those procedures do not result in a decision which is binding on the parties, that they do not cause a substantial delay for the purposes of bringing legal proceedings, that they suspend the period for the time-barring of claims and that they do not give rise to costs — or give rise to very low costs — for the parties, and only if electronic means are not the only means by which the settlement procedure may be accessed and interim measures are possible in exceptional cases where the urgency of the situation so requires (see, to that effect, judgments of 18 March 2010, Alassini and Others, C‑317/08 to C‑320/08, EU:C:2010:146, paragraph 67, and of 14 June 2017, Menini and Rampanelli, C‑75/16, EU:C:2017:457, paragraph 61).
71Those various conditions apply mutatis mutandis to the obligation to exhaust the available administrative remedies at issue in the case in the main proceedings.
72It is therefore for the referring court to examine whether the practical arrangements for the exercise of administrative remedies available under Slovak law do not disproportionately affect the right to an effective remedy before a court referred to in Article 47 of the Charter.
73In that context, it should be noted that Mr Puškár claimed, inter alia, that there was uncertainty as to whether the period for bringing a legal action before the national court begins before a decision has been taken, was taken in the context of an action brought before the administrative authority concerned. If that were the case, the obligation to exhaust available administrative remedies, which might prevent access to judicial protection, would not comply with the right to an effective remedy before a court referred to in Article 47 of the Charter.
74As far as delays are concerned, it should be borne in mind that Article 47(2) of the Charter provides for the right of every person to have their case dealt with within a reasonable period of time. While that right admittedly relates to judicial proceedings themselves, it may not however be undermined by a condition prior to bringing a legal action.
75As regards the costs which a prior administrative complaint might entail, as the Advocate General also stated in points 68 and 69 of her Opinion, although it is in principle permissible for Member States to impose an appropriate charge for bringing an action before an administrative authority, such a charge may not, however, be set at a level which might constitute an obstacle to the exercise of the right to a judicial remedy guaranteed by Article 47 of the Charter. In that regard, account must be taken of the fact that that charge adds to the costs of the judicial proceedings.
76In the light of all the foregoing considerations, the answer to the first question must be that Article 47 of the Charter must be interpreted as meaning that it does not preclude national legislation, which makes the exercise of a judicial remedy by a person stating that his right to protection of personal data guaranteed by Directive 95/46 has been infringed, subject to the prior exhaustion of the available administrative remedies, provided that the practical arrangements for the exercise of such remedies do not disproportionately affect the right to an effective remedy before a court referred to in that article. It is important, in particular, that the prior exhaustion of the available administrative remedies does not lead to a substantial delay in bringing a legal action, that it involves the suspension of the limitation period of the rights concerned and that it does not involve excessive costs.
The third question
77By its third question, which it is appropriate to examine in the second place, the referring court asks, in essence, whether Article 47 of the Charter must be interpreted as precluding that a national court rejects, as evidence of an infringement of the protection of personal data conferred by Directive 95/46, a list, such as the contested list, submitted by the data subject and containing personal data relating to him, if that person had obtained that list without the consent, legally required, of the person responsible for processing that data.
Admissibility
78Several parties and interested parties having submitted observations to the Court take the view that the third question referred for a preliminary ruling is inadmissible.
79First, according to Mr Puškár and the Slovak Government, that question has no connection with EU law in the absence of EU rules on the lawfulness of evidence.
80That argument cannot, however, be accepted.
81It is important to note that Mr Puškár seeks judicial review of a measure by the Slovak tax authorities, namely the drawing up of the contested list, by which the rights conferred on him by Directive 95/46 have, according to him, been infringed.
82The dismissal by the referring court of the evidence at issue in the main proceedings merely on the ground that Mr Puškár has obtained it without the consent, legally required, of the data controller constitutes a limitation on the right to a judicial remedy guaranteed by Article 22 of Directive 95/46 and a limitation on the right to an effective remedy before a court within the meaning of Article 47 of the Charter.
83On the other hand, the Czech Government has expressed doubts as to the relevance of the third question to the resolution of the dispute in the main proceedings, since one of the administrative authorities involved in that dispute, namely the Financial Administration Criminal Office, does not challenge the existence of the contested list. According to the Czech Government, the dispute in the main proceedings does not therefore raise any question as to the existence of the contested list, so that it is not necessary to decide on the admissibility of that list as evidence.
84In that regard, it is sufficient to note that the referring court does not appear to have decided on the circumstances surrounding the drawing up of the contested list.
85In those circumstances, having regard to the case-law referred to in paragraphs 49 and 50 of the present judgment, it is not clear that the interpretation sought of EU law has nothing to do with the facts or the subject matter of the dispute in the main proceedings.
86In the light of all the foregoing considerations, the third question must be considered to be admissible.
Substance
87As has been stated in paragraph 82 of the present judgment, rejecting a list, such as the contested list, as evidence of an infringement of the rights conferred by Directive 95/46, constitutes a limitation on the right to an effective remedy before a court within the meaning of Article 47 of the Charter.
88It is clear from paragraph 62 of the present judgment that such a restriction is justified only, in accordance with Article 52(1) of the Charter, if it is provided for by law, if it respects the essence of that right and, subject to the principle of proportionality, if it is necessary and genuinely meets objectives of general interest recognised by the EU or the need to protect the rights and freedoms of others.
89Therefore, before the disputed list can be rejected as evidence, the referring court must first of all satisfy itself that that restriction of the right to an effective remedy is indeed provided for by national law.
90Next, that court must examine whether such a rejection affects the essential content of the fundamental right to effective judicial protection, as enshrined in Article 47 of the Charter. In that context, it will in particular be necessary to ascertain whether the existence of the contested list and the fact that it contains personal data relating to Mr Puškár are challenged in the context of the dispute in the main proceedings and, where appropriate, if he has other evidence in that regard.
91Finally, it will be for that court to determine whether the rejection of the contested list as evidence is necessary and does in fact satisfy the general interest objectives recognised by the European Union or the need to protect the rights and freedoms of others.
92In that regard, it appears that the objective of avoiding the unauthorised use of internal documents in judicial proceedings is capable of constituting a legitimate general interest objective (see, to that effect, orders of 23 October 2002, Austria v Council, C‑445/00, EU:C:2002:607, paragraph 12; of 23 March 2007, Stadtgemeinde Frohnleiten and Gemeindebetriebe Frohnleiten, C‑221/06, EU:C:2007:185, paragraph 19; and of 29 January 2009, Donnici v Parliament, C‑9/08, not published, EU:C:2009:40, paragraph 13). Furthermore, where a list, such as the contested list, is intended to remain confidential and also contains personal data of other natural persons, there is a need to protect the rights of those persons.
93If the rejection of a list, such as the contested list, as evidence obtained without the consent, legally required, of the authority responsible for processing the data appearing on that list, appears appropriate for achieving those objectives, it is however for the referring court to ascertain whether such a rejection does not disproportionately affect the right to an effective remedy before a court referred to in Article 47 of the Charter.
94At the very least, if the person whose personal data is on the list enjoys a right of access to those data, such rejection appears disproportionate to those very objectives.
95In that regard, Article 12 of Directive 95/46 guarantees everyone a right of access to the data collected relating to him. Furthermore, it is clear from Articles 10 and 11 of Directive 95/46 that the person responsible for processing such data must provide the data subjects with certain information relating to that processing.
96Although Article 13(1) of Directive 95/46 limits the scope of the rights provided for in Articles 10 to 12 of that directive where such a restriction constitutes a necessary measure to safeguard, in particular, the prevention, investigation, detection and prosecution of criminal offences or an important economic or financial interest of a Member State, including taxation and monitoring, inspection or regulatory functions, it expressly requires that such restrictions are imposed by legislative measures (see, to that effect, judgment of 1 October 2015, Bara and Others v Commission, C‑201/14, EU:C:2015:638, paragraph 39).
97Thus, in order to assess the proportionality of a rejection of the disputed list as evidence, the referring court must examine whether its national legislation limits, in relation to the data included in the list, information and access rights laid down in Articles 10 to 12 of Directive 95/46 and if such a limitation is, where appropriate, justified. Moreover, even where that is the case and there is evidence to support a legitimate interest in the possible confidentiality of the contested list, the national courts must determine on a case-by-case basis whether this takes precedence over interest in the protection of the rights of the individual and whether, in the proceedings before that court, other means exist to ensure that confidentiality, in particular as regards the personal data of other natural persons included on that list.
98In the light of the foregoing considerations, the answer to the third question is that Article 47 of the Charter must be interpreted as precluding that a national court rejects, as evidence of an infringement of the protection of personal data conferred by Directive 95/46, a list, such as the contested list, submitted by the data subject and containing personal data relating to him, if that person had obtained that list without the consent, legally required, of the person responsible for processing that data, unless such rejection is laid down by national legislation and respects both the essential content of the right to an effective remedy and the principle of proportionality.
The second question
99By its second question, the referring court asks, in essence, whether Directive 95/46 and Articles 7 and 8 of the Charter are to be interpreted as precluding the processing of personal data by the authorities of a Member State for the purpose of collecting tax and combating tax fraud such as that effected by drawing up the contested list in the main proceedings without the consent of the data subjects.
Admissibility
100According to Mr Puškár, the second question is hypothetical and of no relevance to the outcome of the dispute in the main proceedings. In his view, the national court seeks only to ascertain whether the processing of personal data by the Finance Directorate is admissible as a general rule but does not specifically address the contested list which was designed by the Finance Directorate without legal basis.
101It must however be taken into account, having regard to the case-law referred to in paragraphs 49 and 50 of the present judgment, and the information contained in the order for reference, that it is not clear that the interpretation of EU law sought has nothing to do with the facts or the subject matter of the dispute in the main proceedings.
Substance
102The second question must be examined in the light of Directive 95/46, inasmuch as, as is clear inter alia from the objective of that directive, as set out in Article 1(1) thereof, as long as the conditions governing the legal processing of personal data under that directive are fulfilled, that processing shall be deemed to satisfy also the requirements laid down in Articles 7 and 8 of the Charter.
103As is apparent from paragraphs 33 and 34 of the present judgment, the drawing up of a list, such as the contested list, which contains the names of certain natural persons and associates them with one or more legal persons within which those natural persons purport to act as company directors, constitutes ‘processing of personal data’ within the meaning of Article 2(b) of Directive 95/46.
104In accordance with the provisions of Chapter II of Directive 95/46, entitled ‘General rules on the lawfulness of the processing of personal data’, subject to the exceptions permitted under Article 13 of that directive, all processing of personal data must comply, first, with the principles relating to data quality set out in Article 6 of the directive and, secondly, with one of the criteria for making data processing legitimate listed in Article 7 of that directive (see, to that effect, judgment of 1 October 2015, Bara and Others, C‑201/14, EU:C:2015:638, paragraph 30).
105It is also important to recall that it follows from the objective of ensuring an equivalent level of protection in all Member States, pursued by that directive, that Article 7 thereof sets out an exhaustive and restrictive list of cases in which the processing of personal data can be regarded as being lawful (see judgment of 24 November 2011, ASNEF and FECEMD, C‑468/10 and C‑469/10, EU:C:2011:777, paragraph 30).
106In particular, it should be stated that Article 7(e) provides that personal data may lawfully be processed if ‘it is necessary for the performance of a task carried out in the public interest or in the exercise of official authority vested in the controller or in a third party to whom the data are disclosed’.
107The establishment of the contested list appears likely to fall within that provision.
108It appears that the collection of the tax and combating tax fraud, for the purposes of which the contested list is established, must be regarded as tasks carried out in the public interest within the meaning of that provision.
109However, it is for the referring court to determine whether the Slovak authorities having compiled the list or those to whom it was notified have been invested with those missions by Slovak legislation.
110In that regard, it must be observed that Article 6(1)(b) of Directive 95/46 requires that personal data be collected for specific, explicit and legitimate purposes. As the Advocate General stated in point 106 of her Opinion, the objective of the processing of personal data is inextricably linked, within the scope of Article 7(e) of Directive 95/46, to the task of the controller. Consequently, the transfer of the task to the latter must clearly include the purpose of the processing.
111It is also for the referring court to determine whether the establishment of the contested list is necessary for the performance of the tasks carried out in the public interest at issue in the case in the main proceedings, taking account, in particular, of the precise purpose of the establishment of the contested list, the legal effects to which the persons appearing on it and the public nature of that list are subject and whether or not that list is of a public nature.
112It is important, in that regard, to ensure that the principle of proportionality is respected. The protection of the fundamental right to respect for private life at the European Union level requires that derogations from the protection of personal data and its limitations be carried out within the limits of what is strictly necessary (see, to that effect, judgment of 21 December 2016, Tele2 Sverige and Watson and Others, C‑203/15 and C‑698/15, EU:C:2016:970, paragraph 96 and the case-law cited).
113It is thus for the national court to ascertain whether the establishment of the contested list and the inclusion of the names of the data subjects in such a register are suitable for achieving the objectives pursued by them and whether there is no other less restrictive means in order to achieve those objectives.
114The fact that a person is placed on the contested list is likely to infringe some of his rights. Indeed, inclusion in that list could harm his reputation and affect his relations with the tax authorities. Likewise, such inclusion could affect the presumption of innocence of that person, set out in Article 48(1) of the Charter, as well as the freedom of enterprise enshrined in Article 16 of the Charter of legal persons associated with the natural persons included in the contested list. It appears that an infringement of this kind can be proportionate only if there are sufficient grounds to suspect the person concerned of purportedly acting as a company director of the legal persons associated with him and accordingly undermines the public interest in the collection of taxes and combating tax fraud.
115Although the referring court came to the conclusion that the establishment of the contested list is necessary for the performance of tasks carried out in the public interest of the controller in accordance with Article 7(e) of Directive 95/46, it should also determine that the other conditions for the lawfulness of that processing of personal data imposed by the directive are satisfied, in particular those arising under Articles 6 and 10 to 12 thereof.
116Furthermore, if there were grounds for limiting, under Article 13 of Directive 95/46, certain of the rights provided for in those articles, such as the right to information of the data subject, such a limitation should, as is clear from paragraph 96 of the present judgment, be necessary for the protection of an interest referred to in Article 13(1), such as, inter alia, an important economic and financial interest in the field of taxation and be based on legislative measures.
117In the light of the foregoing considerations, the answer to the second question is that Article 7(e) Directive 95/46 must be interpreted as not precluding the processing of personal data by the authorities of a Member State for the purpose of collecting tax and combating tax fraud such as that effected by drawing up the contested list in the main proceedings, without the consent of the data subjects, provided that, first, those authorities were invested by the national legislation with tasks carried out in the public interest within the meaning of that article, that the drawing-up of that list and the inclusion on it of the names of the data subjects in fact be appropriate and necessary for the purpose of attaining the objectives pursued and that there be sufficient indications to assume that the data subjects are rightly included in that list and, second, that all of the conditions for the lawfulness of that processing of personal data imposed by Directive 95/46 be satisfied.
The fourth question
118By its fourth question, the national court asks, in essence, whether Article 47 of the Charter must be interpreted as precluding a national court, having found that, in a case before it, there are differences between the case-law of the European Court of Human Rights and that of the Court of Justice, following the latter.
119That question was raised by the referring court in general terms, without the latter clarifying in a clear and concrete manner what those differences are.
120It should be borne in mind that the requirements concerning the content of a request for a preliminary ruling are expressly set out in Article 94 of the Court’s Rules of Procedure, of which the national court should, in the context of the cooperation instituted by Article 267 TFEU, be aware and which it is bound to observe scrupulously. Thus, the referring court must set out the precise reasons that led it to raise the question of the interpretation of certain provisions of EU law and to consider it necessary to refer questions to the Court of Justice for a preliminary ruling. The Court has previously held that it is essential that the national court should give at the very least some explanation of the reasons for the choice of the EU law provisions which it seeks to have interpreted and of the link it establishes between those provisions and the national legislation applicable to the proceedings pending before it (judgment of 9 March 2017, Milkova, C‑406/15, EU:C:2017:198, paragraphs 72 and 73 and the case-law cited).
121Those requirements also appear in the recommendations of the Court of Justice of the European Union to national courts and tribunals in relation to the initiation of preliminary ruling proceedings (OJ 2016 C 439, p. 1).
122In the present case, it must be held that the fourth question does not satisfy the requirements set out in the preceding paragraphs.
123It should also be borne in mind that, in accordance with the Court’s settled case-law, the justification for making a request for a preliminary ruling is not for advisory opinions to be delivered on general or hypothetical questions, but rather that it is necessary for the effective resolution of a dispute concerning EU law (see judgment of 21 December 2016, Tele2 Sverige and Watson and Others, C‑203/15 and C‑698/15, EU:C:2016:970, paragraph 130).
124It follows that the third question is inadmissible.
Costs
125Since these proceedings are, for the parties to the main proceedings, a step in the action pending before the national court, the decision on costs is a matter for that court. Costs incurred in submitting observations to the Court, other than the costs of those parties, are not recoverable.
Operative part
On those grounds, the Court (Second Chamber) hereby rules:
1.Article 47 of the Charter of Fundamental Rights of the European Union must be interpreted as meaning that it does not preclude national legislation, which makes the exercise of a judicial remedy by a person stating that his right to protection of personal data guaranteed by Directive 95/46/EC of the European Parliament and of the Council of 24 October 1995 on the protection of individuals with regard to the processing of personal data and on the free movement of such data, has been infringed, subject to the prior exhaustion of the remedies available to him before the national administrative authorities, provided that the practical arrangements for the exercise of such remedies do not disproportionately affect the right to an effective remedy before a court referred to in that article. It is important, in particular, that the prior exhaustion of the available remedies before the national administrative authorities does not lead to a substantial delay in bringing a legal action, that it involves the suspension of the limitation period of the rights concerned and that it does not involve excessive costs.
2.Article 47 of the Charter of Fundamental Rights of the European Union must be interpreted as precluding that a national court rejects, as evidence of an infringement of the protection of personal data conferred by Directive 95/46, a list, such as the contested list, submitted by the data subject and containing personal data relating to him, if that person had obtained that list without the consent, legally required, of the person responsible for processing that data, unless such rejection is laid down by national legislation and respects both the essential content of the right to an effective remedy and the principle of proportionality.
3.Article 7(e) Directive 95/46 must be interpreted as not precluding the processing of personal data by the authorities of a Member State for the purpose of collecting tax and combating tax fraud such as that effected by drawing up of a list of persons such as that at issue in the main proceedings, without the consent of the data subjects, provided that, first, those authorities were invested by the national legislation with tasks carried out in the public interest within the meaning of that article, that the drawing-up of that list and the inclusion on it of the names of the data subjects in fact be adequate and necessary for the attainment of the objectives pursued and that there be sufficient indications to assume that the data subjects are rightly included in that list and, second, that all of the conditions for the lawfulness of that processing of personal data imposed by Directive 95/46 be satisfied.
Source: EUR-Lex, © European Union, 1998-2026. Reuse authorised under Decision 2011/833/EU.