{"id":43092,"date":"2026-01-08T12:03:11","date_gmt":"2026-01-08T10:03:11","guid":{"rendered":"https:\/\/2b-advice.com\/?p=43092"},"modified":"2026-06-22T10:34:23","modified_gmt":"2026-06-22T08:34:23","slug":"three-stage-examination-to-determine-the-legitimate-interest-these-questions-are-decisive","status":"publish","type":"post","link":"https:\/\/2b-advice.com\/en\/2026\/01\/08\/drei-stufen-pruefung-zur-ermittlung-des-berechtigten-interesses-diese-fragen-sind-entscheidend\/","title":{"rendered":"Three-step test for determining legitimate interest: these questions are crucial"},"content":{"rendered":"<div data-elementor-type=\"wp-post\" data-elementor-id=\"43092\" class=\"elementor elementor-43092\" data-elementor-post-type=\"post\">\n\t\t\t\t<div class=\"elementor-element elementor-element-4f27f3d e-flex e-con-boxed e-con e-parent\" data-id=\"4f27f3d\" data-element_type=\"container\" data-e-type=\"container\">\n\t\t\t\t\t<div class=\"e-con-inner\">\n\t\t\t\t<div class=\"elementor-element elementor-element-2d10667 elementor-widget elementor-widget-author-box\" data-id=\"2d10667\" data-element_type=\"widget\" data-e-type=\"widget\" data-widget_type=\"author-box.default\">\n\t\t\t\t<div class=\"elementor-widget-container\">\n\t\t\t\t\t\t\t<div class=\"elementor-author-box\">\n\t\t\t\t\t\t\t<a href=\"http:\/\/2b-advice.com\/en\/aristotelis-zervos\/\" class=\"elementor-author-box__avatar\">\n\t\t\t\t\t<img decoding=\"async\" src=\"https:\/\/2b-advice.com\/wp-content\/uploads\/2025\/09\/aristotelis-zervos-sq-300x300.jpg\" alt=\"Picture of Aristotelis Zervos\" loading=\"lazy\">\n\t\t\t\t<\/a>\n\t\t\t\n\t\t\t<div class=\"elementor-author-box__text\">\n\t\t\t\t\t\t\t\t\t<a href=\"http:\/\/2b-advice.com\/en\/aristotelis-zervos\/\">\n\t\t\t\t\t\t<h4 class=\"elementor-author-box__name\">\n\t\t\t\t\t\t\t Aristotelis Zervos\t\t\t\t\t\t<\/h4>\n\t\t\t\t\t<\/a>\n\t\t\t\t\n\t\t\t\t\t\t\t\t\t<div class=\"elementor-author-box__bio\">\n\t\t\t\t\t\t<p>Aristotelis Zervos, Editorial Director at 2B Advice, combines legal and journalistic expertise in <a href=\"https:\/\/2b-advice.com\/en\/marcus-belke\/\">Data protection<\/a>IT compliance and AI regulation.<\/p>\n\t\t\t\t\t<\/div>\n\t\t\t\t\n\t\t\t\t\t\t\t<\/div>\n\t\t<\/div>\n\t\t\t\t\t\t<\/div>\n\t\t\t\t<\/div>\n\t\t\t\t<div class=\"elementor-element elementor-element-e2220aa elementor-widget elementor-widget-text-editor\" data-id=\"e2220aa\" data-element_type=\"widget\" data-e-type=\"widget\" data-widget_type=\"text-editor.default\">\n\t\t\t\t<div class=\"elementor-widget-container\">\n\t\t\t\t\t\t\t\t\t<p>In practice, legitimate interest is often the \u201eall-purpose\u201c legal basis and at the same time one of the most error-prone. Anyone using Art. 6 para. 1 lit. f GDPR must clearly justify in advance why there is a legitimate interest, why the planned processing is necessary and why there are no overriding rights of the data subjects to the contrary. The article systematically guides you through the three-stage test for determining the legitimate interest based on the questionnaire of the Hamburg Commissioner for Data Protection and Freedom of Information and uses practical examples (including direct advertising and video surveillance) to show how a robust balancing of interests can be established, documented and implemented in a consistent manner in compliance practice.<\/p>\t\t\t\t\t\t\t\t<\/div>\n\t\t\t\t<\/div>\n\t\t\t\t<div class=\"elementor-element elementor-element-f7e582b elementor-widget elementor-widget-heading\" data-id=\"f7e582b\" data-element_type=\"widget\" data-e-type=\"widget\" data-widget_type=\"heading.default\">\n\t\t\t\t<div class=\"elementor-widget-container\">\n\t\t\t\t\t<h2 class=\"elementor-heading-title elementor-size-default\">Legitimate Interest as a \"Swiss Army Knife\" Under the GDPR<\/h2>\t\t\t\t<\/div>\n\t\t\t\t<\/div>\n\t\t\t\t<div class=\"elementor-element elementor-element-09d6f03 elementor-widget elementor-widget-text-editor\" data-id=\"09d6f03\" data-element_type=\"widget\" data-e-type=\"widget\" data-widget_type=\"text-editor.default\">\n\t\t\t\t<div class=\"elementor-widget-container\">\n\t\t\t\t\t\t\t\t\t<p>Art. 6 para. 1 lit. f GDPR provides companies and authorities with a flexible legal basis for processing personal data, provided that there are legitimate interests of the controller or a third party and no overriding interests or fundamental rights of the data subjects. However, this balancing clause requires careful consideration in each individual case.<\/p><p>The Federal Constitutional Court (BVerfG) already emphasized in its 1983 census ruling that interference with the right to informational self-determination is only permissible in the overriding public interest on the basis of a proportionate law. Accordingly, the European legislator has enshrined the three-step test in Art. 6 para. 1 lit. f GDPR, which is intended to ensure that any processing based on legitimate interest is lawful and proportionate.<\/p><p>In practice, those responsible must carry out documented checks in advance,<\/p><ol><li>whether there is a legitimate interest,<\/li><li>whether the processing is necessary for this purpose, and<\/li><li>whether the interests or fundamental rights of the data subjects do not prevail.<\/li><\/ol><p><br \/>On January 6, 2026, the Hamburg Commissioner for Data Protection and Freedom of Information (HmbBfDI) published a list of questions that sets out criteria for each stage and enables a structured weighing of interests. The three test steps are systematically explained below and illustrated with practical examples.<\/p>\t\t\t\t\t\t\t\t<\/div>\n\t\t\t\t<\/div>\n\t\t\t\t<div class=\"elementor-element elementor-element-3105a99 elementor-widget elementor-widget-heading\" data-id=\"3105a99\" data-element_type=\"widget\" data-e-type=\"widget\" data-widget_type=\"heading.default\">\n\t\t\t\t<div class=\"elementor-widget-container\">\n\t\t\t\t\t<h2 class=\"elementor-heading-title elementor-size-default\">Existence of a legitimate interest<\/h2>\t\t\t\t<\/div>\n\t\t\t\t<\/div>\n\t\t\t\t<div class=\"elementor-element elementor-element-4934d6e elementor-widget elementor-widget-text-editor\" data-id=\"4934d6e\" data-element_type=\"widget\" data-e-type=\"widget\" data-widget_type=\"text-editor.default\">\n\t\t\t\t<div class=\"elementor-widget-container\">\n\t\t\t\t\t\t\t\t\t<p>The first step is to examine which interest the controller or a third party is specifically pursuing with the planned data processing. Art. 6 para. 1 lit. f GDPR expressly mentions both the controller's own interests and the interests of third parties (natural or legal persons, authorities, etc., see Art. 4 no. 10 GDPR). The decisive factor is that it is a \u201elegitimate\u201c interest. This term is to be understood broadly: It can be of a legal, economic, non-material or factual nature. In principle, a wide range of interests can be considered, such as economic interests (e.g. increasing efficiency, reducing costs), security interests (protection against fraud, theft or cyber attacks) or social\/internal interests (maintaining network security, quality assurance, customer care). However, some qualification criteria must be met for an interest to be recognized as \u201elegitimate\u201c:<\/p><ul><li><strong>Legitimacy and legal conformity:<\/strong> The interest pursued must be legitimate. Interests that violate applicable EU or Member State law are not legitimate per se. For example, an \u201einterest\u201c in discriminatory data use or general data retention without a purpose would be inadmissible.<\/li><li><strong>Clarity and precision:<\/strong> The interest and the specific purpose of the processing must be formulated concretely and precisely. Only a clearly defined interest can be meaningfully weighed against the rights of the data subject in the third step. Vague or general statements (\u201eany business purposes\u201c) are not sufficient.<\/li><li><strong>Topicality and relevance to reality:<\/strong> The interest must be real and present, not merely speculative or hypothetical. A benefit that is only possible in the distant future does not justify current data processing. Example: The storage of customer data \u201ein stock\u201c for as yet undefined future business ideas would not be a legitimate interest.<\/li><\/ul><p><br \/>If these conditions are met, a legitimate interest (i.e. legitimate and worthy of protection) can be assumed. Typical examples can be found in the recitals: Recital 47, for example, explicitly mentions direct marketing as a possible case of legitimate interest. A company can therefore generally assume that the interest in direct marketing (especially to existing customers) can be legitimate.\u00a0<\/p>\t\t\t\t\t\t\t\t<\/div>\n\t\t\t\t<\/div>\n\t\t\t\t<div class=\"elementor-element elementor-element-d079335 elementor-widget elementor-widget-heading\" data-id=\"d079335\" data-element_type=\"widget\" data-e-type=\"widget\" data-widget_type=\"heading.default\">\n\t\t\t\t<div class=\"elementor-widget-container\">\n\t\t\t\t\t<h2 class=\"elementor-heading-title elementor-size-default\">6 Questions on legitimate interest<\/h2>\t\t\t\t<\/div>\n\t\t\t\t<\/div>\n\t\t\t\t<div class=\"elementor-element elementor-element-8df3e42 elementor-widget elementor-widget-text-editor\" data-id=\"8df3e42\" data-element_type=\"widget\" data-e-type=\"widget\" data-widget_type=\"text-editor.default\">\n\t\t\t\t<div class=\"elementor-widget-container\">\n\t\t\t\t\t\t\t\t\t<h5>What is the interest in the processing activity?<\/h5><p>This is about the general benefit that is expected from the processing activity, such as the \u201emarketing of products\u201c. Recitals 47 to 49 of the GDPR contain examples of legitimate interests.<\/p><h5>What is the specific purpose of the planned processing?<\/h5><p>This is about the objective or the specific reason for the planned data processing. Example: Direct advertising to own customers by postal letter (e.g. advertising catalog).<\/p><h5>Who is following the interest?<\/h5><p>Art. 6 para. 1 lit. f GDPR includes own and third-party (third party) interests. \u201eThird party\u201c means a natural or legal person, public authority, agency or body other than the data subject, controller, processor and persons who, under the direct authority of the controller or processor, are authorized to process personal data, Art. 4 no. 10 GDPR.<\/p><h5>Is the interest legitimate and does it not violate applicable law?<\/h5><p>Interests that violate applicable EU or Member State law are not eligible.<\/p><h5>Is the interest formulated clearly and precisely?<\/h5><p>The scope of the legitimate interest pursued must be clearly defined so that it can be weighed against the interests and fundamental rights of the data subject in the third stage.<\/p><h5>Is the interest real and present?<\/h5><p>Speculative or hypothetical interests cannot be properly assessed and therefore cannot justify data processing. Example: Data retention for future and as yet unspecified business ideas.<\/p>\t\t\t\t\t\t\t\t<\/div>\n\t\t\t\t<\/div>\n\t\t\t\t<div class=\"elementor-element elementor-element-baf95fc elementor-widget elementor-widget-heading\" data-id=\"baf95fc\" data-element_type=\"widget\" data-e-type=\"widget\" data-widget_type=\"heading.default\">\n\t\t\t\t<div class=\"elementor-widget-container\">\n\t\t\t\t\t<h2 class=\"elementor-heading-title elementor-size-default\">Necessity of the processing<\/h2>\t\t\t\t<\/div>\n\t\t\t\t<\/div>\n\t\t\t\t<div class=\"elementor-element elementor-element-cf9bb3f elementor-widget elementor-widget-text-editor\" data-id=\"cf9bb3f\" data-element_type=\"widget\" data-e-type=\"widget\" data-widget_type=\"text-editor.default\">\n\t\t\t\t<div class=\"elementor-widget-container\">\n\t\t\t\t\t\t\t\t\t<p>If there is a legitimate interest, the necessity and appropriateness of the planned processing for the pursuit of this interest must be examined in a second step. Art. 6 para. 1 lit. f GDPR requires that the processing is \u201enecessary for the purposes of the legitimate interests\u201c. This reflects the general principle of proportionality: the measure must be suitable and necessary to achieve the legitimate objective. And it must not disproportionately interfere with the rights of the data subjects.<\/p><p>The key questions at this stage are: Is this specific data even needed for the purpose? And if so, is there no milder means of achieving the legitimate interest just as effectively? The wording of the GDPR and the principle of data minimization (Art. 5 para. 1 lit. c GDPR) already set the direction here: Only appropriate, substantial and absolutely necessary data may be processed. If there is an equally effective but less intrusive method for the data subjects, this must be chosen. Examples of milder means can be anonymization or pseudonymization of the data, the use of synthetic test data instead of real personal data or the limited evaluation of samples instead of a full survey.<\/p><p>Another element of necessity is the limitation of the scope of processing: the planned measure should be kept as small and targeted as possible. In concrete terms, this means that the scope of data, group of persons and duration of processing must be reduced to the necessary minimum. Particular attention must also be paid to the storage period: personal data may only be stored for as long as is necessary for the intended purpose. A deletion concept with defined deadlines is essential. Once the purpose no longer applies, there is an obligation to erase (Art. 17 para. 1 lit. a GDPR; Recital 39). Example<em>:<\/em> In the case of video surveillance of company premises, the necessity could be limited by the fact that the recordings are automatically overwritten after a short time (e.g. 48 hours) if no security-relevant event has been detected.<\/p><p>The necessity test forces the controller to critically scrutinize the processing.<\/p>\t\t\t\t\t\t\t\t<\/div>\n\t\t\t\t<\/div>\n\t\t\t\t<div class=\"elementor-element elementor-element-4be1fa7 elementor-widget elementor-widget-heading\" data-id=\"4be1fa7\" data-element_type=\"widget\" data-e-type=\"widget\" data-widget_type=\"heading.default\">\n\t\t\t\t<div class=\"elementor-widget-container\">\n\t\t\t\t\t<h2 class=\"elementor-heading-title elementor-size-default\">7 Questions on the necessity of processing<\/h2>\t\t\t\t<\/div>\n\t\t\t\t<\/div>\n\t\t\t\t<div class=\"elementor-element elementor-element-37f0236 elementor-widget elementor-widget-text-editor\" data-id=\"37f0236\" data-element_type=\"widget\" data-e-type=\"widget\" data-widget_type=\"text-editor.default\">\n\t\t\t\t<div class=\"elementor-widget-container\">\n\t\t\t\t\t\t\t\t\t<h5>Is the processing absolutely necessary to achieve the interest or can milder means also be considered?<\/h5><p>There must be no milder, less intrusive means. Alternatives must be examined. Example: anonymization, pseudonymization, synthetic data instead of real data.<\/p><h5>Is the data to be processed limited to what is necessary?<\/h5><p>The principle of data minimization must be observed, Art. 5 para. 1 lit. c GDPR. Only data that is appropriate, relevant and necessary for the specific purpose may be processed. In particular, the processing of sensitive data (Art. 9 GDPR) is only permitted in narrow, legally regulated exceptional cases (Art. 9 para. 2 GDPR).<\/p><h5>Is the number of data subjects limited to the minimum necessary to achieve the purpose?<\/h5><p>Example: Limiting the number of data records, random samples instead of full surveys, anonymization.<\/p><h5>Is the data processing one-off or continuous?<\/h5><p>In the case of ongoing processing, the necessity must be permanent. Once a legitimate interest has been established, this does not automatically justify the ongoing processing of data.<\/p><h5>Are all processing steps necessary for the purpose or can individual steps be omitted?<\/h5><p>The processing steps must be considered and evaluated individually.<\/p><h5>Is there a deletion concept? Is the storage period defined?<\/h5><p>Personal data may only be stored for as long as it is necessary for the intended purpose (Recital 39 and Art. 17 para. 1 lit. a GDPR). Once the purpose no longer applies, there is generally a deletion obligation. In contrast, there are statutory retention periods, e.g. from the German Commercial Code (HGB), the German Fiscal Code (AO), the German Income Tax Act (EStG), social security law or the German Industrial Code. The storage period should be documented for each data category and automated deletion processes should be in place.<\/p><h5>Is there an overview of the existing and planned data flows?<\/h5><p>The data flow must also be comprehensible and transparent for third parties. A data flow diagram is used for your own illustration and for accountability and illustration to management, customers, affected persons, supervisory authorities, etc.<\/p>\t\t\t\t\t\t\t\t<\/div>\n\t\t\t\t<\/div>\n\t\t\t\t<div class=\"elementor-element elementor-element-d3a9fa4 elementor-widget elementor-widget-heading\" data-id=\"d3a9fa4\" data-element_type=\"widget\" data-e-type=\"widget\" data-widget_type=\"heading.default\">\n\t\t\t\t<div class=\"elementor-widget-container\">\n\t\t\t\t\t<h2 class=\"elementor-heading-title elementor-size-default\">Balancing of interests: Do the interests of the data subjects prevail?<\/h2>\t\t\t\t<\/div>\n\t\t\t\t<\/div>\n\t\t\t\t<div class=\"elementor-element elementor-element-3a0e3a8 elementor-widget elementor-widget-text-editor\" data-id=\"3a0e3a8\" data-element_type=\"widget\" data-e-type=\"widget\" data-widget_type=\"text-editor.default\">\n\t\t\t\t<div class=\"elementor-widget-container\">\n\t\t\t\t\t\t\t\t\t<p>Only when a legitimate interest has been identified and the measure has been qualified as necessary for this purpose does the decisive balancing according to Art. 6 para. 1 lit. f half-sentence 2 GDPR take place: Do the interests, fundamental rights and freedoms of the data subject outweigh the interests of the controller? This third test step ensures that even in the case of legitimate purposes and necessary data processing, the interests of the data subject worthy of protection are not disproportionately impaired. It is a comprehensive assessment of all circumstances of the individual case. Recital 47 sentence 1 emphasizes that the reasonable expectations of the data subject based on their relationship with the controller must be taken into account. As a result, processing may only take place if the balance does not tip in favor of the data subject. Otherwise, the processing is unlawful.<\/p><p>Case law (in particular the ECJ and national courts) and the supervisory authorities have developed numerous criteria that are incorporated into the balancing of interests. An overall assessment is made on the basis of these criteria. No single criterion is decisive on its own; rather, a comprehensive balancing of interests must be carried out. The legitimate interests of the controller are compared with the adverse effects on the data subjects. Ultimately, this assessment is similar to a proportionality test in the narrower sense (weighing up the severity of the interference vs. the importance of the purpose). Recital 47 restricts that authorities should not rely on Art. 6 para. 1 lit. f when it comes to fulfilling their public tasks. Otherwise, the following applies: the more important the interest and the lower the weight of the interference, the more likely the controller's interest will prevail.<\/p><p>Reading tip: <a href=\"https:\/\/2b-advice.com\/en\/2024\/11\/07\/create-data-protection-impact-assessment-in-ailance-ropa\/\">Intelligent data protection impact assessment in Ailance<\/a><\/p>\t\t\t\t\t\t\t\t<\/div>\n\t\t\t\t<\/div>\n\t\t\t\t<div class=\"elementor-element elementor-element-39ae21a elementor-widget elementor-widget-heading\" data-id=\"39ae21a\" data-element_type=\"widget\" data-e-type=\"widget\" data-widget_type=\"heading.default\">\n\t\t\t\t<div class=\"elementor-widget-container\">\n\t\t\t\t\t<h2 class=\"elementor-heading-title elementor-size-default\">Fundamental rights, freedoms and interests of the data subjects<\/h2>\t\t\t\t<\/div>\n\t\t\t\t<\/div>\n\t\t\t\t<div class=\"elementor-element elementor-element-578848a elementor-widget elementor-widget-text-editor\" data-id=\"578848a\" data-element_type=\"widget\" data-e-type=\"widget\" data-widget_type=\"text-editor.default\">\n\t\t\t\t<div class=\"elementor-widget-container\">\n\t\t\t\t\t\t\t\t\t<h5>Which fundamental rights of the data subjects are affected?<\/h5><p>The right to privacy, data protection, non-discrimination, freedom and security, freedom of expression and information, freedom of thought, conscience and religion, freedom of assembly and association, the prohibition of discrimination, the right to property or the right to physical and mental integrity, among others.<\/p><h5>Are the fundamental freedoms of the data subjects affected?<\/h5><p>This includes the free movement of goods, free movement of workers, freedom of establishment, freedom to provide services, freedom of capital and freedom of payment under the TFEU.<\/p><h5>In addition to fundamental rights and freedoms, are the \u201einterests\u201c of the persons concerned also taken into account?<\/h5><p>This includes all interests that could be affected by the processing in question.<\/p><ul><li>Financial interests: e.g. protection against effects on investments, employment opportunities, retirement provision, credit ratings and insurance cover.<\/li><li>Social interests: e.g. protection of the social sphere, reputational damage, discrimination, unwanted contact<\/li><li>Personal interests: e.g. protection of intimacy and privacy through the processing of data in connection with a person's sex life or sexual orientation<\/li><\/ul>\t\t\t\t\t\t\t\t<\/div>\n\t\t\t\t<\/div>\n\t\t\t\t<div class=\"elementor-element elementor-element-8869a98 elementor-widget elementor-widget-heading\" data-id=\"8869a98\" data-element_type=\"widget\" data-e-type=\"widget\" data-widget_type=\"heading.default\">\n\t\t\t\t<div class=\"elementor-widget-container\">\n\t\t\t\t\t<h2 class=\"elementor-heading-title elementor-size-default\">Type of personal data<\/h2>\t\t\t\t<\/div>\n\t\t\t\t<\/div>\n\t\t\t\t<div class=\"elementor-element elementor-element-45febb0 elementor-widget elementor-widget-text-editor\" data-id=\"45febb0\" data-element_type=\"widget\" data-e-type=\"widget\" data-widget_type=\"text-editor.default\">\n\t\t\t\t<div class=\"elementor-widget-container\">\n\t\t\t\t\t\t\t\t\t<h5>What type of data should be processed?<\/h5><p>In what capacity are the persons affected? Example: In their personal or professional capacity.<\/p><h5>Are these special categories of personal data (Art. 9 GDPR)?<\/h5><p>This sensitive data includes in particular<\/p><ul><li>Ethnic origin and race<\/li><li>political opinions<\/li><li>religious or ideological convictions<\/li><li>Trade union membership<\/li><li>Genetic and biometric data (e.g. fingerprint)<\/li><li>Health data<\/li><li>Data on a person's sex life or sexual orientation<\/li><\/ul><p><br \/>If this data is processed, the potential interests of the data subjects are generally given a high weighting in the weighing up process. In addition, the requirements of Art. 9 para. 2 GDPR must be met. Even if there is an exception under Art. 9 para. 2 GDPR, the balancing of interests under Art. 6 para. 1 lit. f GDPR can still be in favor of the interests of the data subjects (see ECJ of 21 December 2023 (Ref. C-667\/21)).<\/p><h5>Is it data from children?<\/h5><p>The best interests of the child must be a primary consideration in all measures concerning children. All rights must be taken into account here, not just data protection rights, cf. 38 of the GDPR.<\/p><h5>Is it data on criminal convictions and offenses pursuant to Art. 10 GDPR?<\/h5><p>These data (including the certificate of good conduct) are also particularly worthy of protection. Processing should only take place under official supervision or if it would be permitted under EU or national law.<\/p><h5>Is it private data?<\/h5><p>Some data is considered particularly sensitive or private by data subjects, even if it is not specifically listed in Art. 9 GDPR or Art. 10 GDPR. Example: financial, location or family data.<\/p>\t\t\t\t\t\t\t\t<\/div>\n\t\t\t\t<\/div>\n\t\t\t\t<div class=\"elementor-element elementor-element-966a70b elementor-widget elementor-widget-heading\" data-id=\"966a70b\" data-element_type=\"widget\" data-e-type=\"widget\" data-widget_type=\"heading.default\">\n\t\t\t\t<div class=\"elementor-widget-container\">\n\t\t\t\t\t<h2 class=\"elementor-heading-title elementor-size-default\">Reasonable expectations of the data subjects (Recital 47 p. 1 to the GDPR)<\/h2>\t\t\t\t<\/div>\n\t\t\t\t<\/div>\n\t\t\t\t<div class=\"elementor-element elementor-element-46addf2 elementor-widget elementor-widget-text-editor\" data-id=\"46addf2\" data-element_type=\"widget\" data-e-type=\"widget\" data-widget_type=\"text-editor.default\">\n\t\t\t\t<div class=\"elementor-widget-container\">\n\t\t\t\t\t\t\t\t\t<h5>Where and when is the data collected?<\/h5><p>An indication in favor of the data subject exists if the data is used for a completely new, unrecognizable purpose or a purpose that goes beyond the original purpose and the person could not reasonably have expected the data processing at the time of collection (see also Art. 6 para. 4 GDPR).<\/p><h5>How is the data collected?<\/h5><p>What technologies and methods are used? Are these practices generally known and transparent for the persons concerned? Examples: Online surveys, competitions, web scraping.<\/p><h5>How is data processing made transparent to the data subjects?<\/h5><p>The information obligations under Art. 13 and 14 GDPR must be observed. This information must be provided directly when the data is collected. Otherwise, the lawfulness of the processing will already fail due to a lack of transparency.<\/p><h5>Is there a relationship with the persons concerned?<\/h5><p>If a relationship already exists between the data subject and the controller, this increases the foreseeability of data processing, Recital 47 p.2 of the GDPR. Example: The data subject is already a customer.<\/p><h5>How extensive is the data collection and how many people are affected?<\/h5><p>The greater the scope of the data processing, the greater the risk that the rights of the data subjects will be impaired.<\/p><h5>What are the possible negative effects of processing on data subjects?<\/h5><p>Has a data protection impact assessment or threshold analysis been carried out?<\/p><h5>Are there any positive effects of processing on data subjects?<\/h5><p>If the processing is in the objective, presumed interest of the data subject. Examples: Time savings, financial benefits.<\/p><h5>Will data subjects lose control over the use of their personal data?<\/h5><p>Are protective measures in place to minimize the effects? Can the affected persons take protective measures themselves if necessary?<\/p><h5>Who processes the data? How many people have access?<\/h5><p>What are the qualifications of the persons or companies processing the data? Is the data treated confidentially? Are there access restrictions within the meaning of Art. 32 para. 4 GDPR?<\/p>\t\t\t\t\t\t\t\t<\/div>\n\t\t\t\t<\/div>\n\t\t\t\t<div class=\"elementor-element elementor-element-cc08a9a elementor-widget elementor-widget-heading\" data-id=\"cc08a9a\" data-element_type=\"widget\" data-e-type=\"widget\" data-widget_type=\"heading.default\">\n\t\t\t\t<div class=\"elementor-widget-container\">\n\t\t\t\t\t<h2 class=\"elementor-heading-title elementor-size-default\">Examples of balancing interests<\/h2>\t\t\t\t<\/div>\n\t\t\t\t<\/div>\n\t\t\t\t<div class=\"elementor-element elementor-element-751d819 elementor-widget elementor-widget-text-editor\" data-id=\"751d819\" data-element_type=\"widget\" data-e-type=\"widget\" data-widget_type=\"text-editor.default\">\n\t\t\t\t<div class=\"elementor-widget-container\">\n\t\t\t\t\t\t\t\t\t<h4><strong>Direct advertising to existing customers:<\/strong><\/h4><p>A company wishes to use customer data to send postal advertising for similar products. Interest: effective marketing (legitimate economic interest, Recital 47). Data: Name and address. Normal data has already been collected as part of the customer relationship. Necessity: Dispatch impossible without this data; a milder means would possibly be consent, but in the case of direct advertising to existing customers, the law grants the company a legitimate interest. Consideration: Due to the business relationship, customers have a certain expectation of receiving occasional advertising and the interference is limited to moderate letter advertising. In addition, an opt-out option is clearly offered. Result: As a rule, the company's interests prevail here and processing is permissible.<\/p><h4><strong>Video surveillance of a store:<\/strong><\/h4><p>A store operator installs surveillance cameras on the sales floor to prevent theft. Interest: Protection of property, safety of employees and customers (legitimate interest). <em>Data:<\/em> Video recordings of all persons in the store (potentially many people affected, sometimes sensitive behavioral data; possibly also employees = special protection needs according to BVerfG case law in employment relationships). Necessity: Could alternatives such as more staff or security tags be sufficient? If not, video surveillance is generally suitable as a last resort. Weighing up: This must be examined carefully: The measure interferes with customers' right to privacy. Mitigation through transparency (information signs), limited camera angles (no surveillance of private areas such as toilets) and short storage duration is important. If the store is located in a high theft area and surveillance takes place during opening hours, the operator's interest (protection against significant damage) could just about outweigh the customer's interest in not being observed while shopping<strong>.<\/strong> Provided that no less intrusive solution is possible. However, if permanent filming were to take place without any indication or if areas that enjoy privacy (e.g. changing rooms) were to be monitored, the rights of the data subject would clearly prevail and the processing would be unlawful. The expectations of employees are also relevant under employment law: Covert surveillance would be disproportionate, open camera with works council approval possibly permissible if no permanent stress\/surveillance pressure arises. Courts (including the Federal Constitutional Court) demand strict proportionality and respect for employee rights.<\/p>\t\t\t\t\t\t\t\t<\/div>\n\t\t\t\t<\/div>\n\t\t\t\t<div class=\"elementor-element elementor-element-b2b8c94 elementor-widget elementor-widget-heading\" data-id=\"b2b8c94\" data-element_type=\"widget\" data-e-type=\"widget\" data-widget_type=\"heading.default\">\n\t\t\t\t<div class=\"elementor-widget-container\">\n\t\t\t\t\t<h2 class=\"elementor-heading-title elementor-size-default\">Legitimate interest as legal basis<\/h2>\t\t\t\t<\/div>\n\t\t\t\t<\/div>\n\t\t\t\t<div class=\"elementor-element elementor-element-778de0c elementor-widget elementor-widget-text-editor\" data-id=\"778de0c\" data-element_type=\"widget\" data-e-type=\"widget\" data-widget_type=\"text-editor.default\">\n\t\t\t\t<div class=\"elementor-widget-container\">\n\t\t\t\t\t\t\t\t\t<p>Examples such as these make it clear that the balancing of interests requires an individual assessment. Small changes in the facts of the case (different scope of data, different context) can shift the result. Therefore, the assessment must be specific and documented for each processing activity. If the rights of the data subjects are significantly impaired, the limit of what is permissible has been reached. Then the rights of the data subjects prevail and Art. 6 para. 1 lit. f GDPR does not provide a basis for legitimacy.<\/p><p>Conversely, if the three-step test is carefully carried out and documented, Art. 6 para. 1 lit. f GDPR can provide a reliable legal basis in many situations.<\/p><p>Source: <a href=\"https:\/\/datenschutz-hamburg.de\/news\/hmbbfdi-veroeffentlicht-fragenkatalog-zur-interessenabwaegung-nach-dsgvo\" target=\"_blank\" rel=\"noopener\">List of questions on the balancing of interests according to the GDPR of the HmbBfDI<\/a><\/p>\t\t\t\t\t\t\t\t<\/div>\n\t\t\t\t<\/div>\n\t\t\t\t<div class=\"elementor-element elementor-element-a93b206 elementor-widget elementor-widget-heading\" data-id=\"a93b206\" data-element_type=\"widget\" data-e-type=\"widget\" data-widget_type=\"heading.default\">\n\t\t\t\t<div class=\"elementor-widget-container\">\n\t\t\t\t\t<h2 class=\"elementor-heading-title elementor-size-default\">Implement processing intelligently with Ailance<\/h2>\t\t\t\t<\/div>\n\t\t\t\t<\/div>\n\t\t\t\t<div class=\"elementor-element elementor-element-ae1105b elementor-widget elementor-widget-text-editor\" data-id=\"ae1105b\" data-element_type=\"widget\" data-e-type=\"widget\" data-widget_type=\"text-editor.default\">\n\t\t\t\t<div class=\"elementor-widget-container\">\n\t\t\t\t\t\t\t\t\t<p>Do you want to implement the three-step check in accordance with Art. 6 (1) (f) GDPR not only correctly, but also in a verifiable and scalable manner? Including clean documentation, review workflow and regular re-evaluation? Ailance supports you in efficiently anchoring processes for transparency, objection (Art. 21 GDPR) and erasure (Art. 17 GDPR).<\/p><p data-start=\"474\" data-end=\"649\" data-is-last-node=\"\" data-is-only-node=\"\"><strong>Arrange a demo of Ailance<\/strong> and find out how you can document legitimate interests in an audit-proof manner and strengthen your data protection compliance in the long term.<\/p>\t\t\t\t\t\t\t\t<\/div>\n\t\t\t\t<\/div>\n\t\t<div class=\"elementor-element elementor-element-0654bfa e-con-full e-flex e-con e-child\" data-id=\"0654bfa\" data-element_type=\"container\" data-e-type=\"container\">\n\t\t\t\t<div class=\"elementor-element elementor-element-8d15481 elementor-widget-divider--view-line elementor-widget elementor-widget-divider\" data-id=\"8d15481\" data-element_type=\"widget\" data-e-type=\"widget\" data-widget_type=\"divider.default\">\n\t\t\t\t<div class=\"elementor-widget-container\">\n\t\t\t\t\t\t\t<div class=\"elementor-divider\">\n\t\t\t<span class=\"elementor-divider-separator\">\n\t\t\t\t\t\t<\/span>\n\t\t<\/div>\n\t\t\t\t\t\t<\/div>\n\t\t\t\t<\/div>\n\t\t\t\t<div class=\"elementor-element elementor-element-47df019 elementor-widget elementor-widget-text-editor\" data-id=\"47df019\" data-element_type=\"widget\" data-e-type=\"widget\" data-widget_type=\"text-editor.default\">\n\t\t\t\t<div class=\"elementor-widget-container\">\n\t\t\t\t\t\t\t\t\t<p><em>Aristotelis Zervos is Editorial Director at 2B Advice, a lawyer and journalist with profound expertise in data protection, GDPR, IT compliance and AI governance. He regularly publishes in-depth articles on AI regulation, GDPR compliance and risk management. You can find out more about him on his <a id=\"menur29rv\" class=\"fui-Link ___1q1shib f2hkw1w f3rmtva f1ewtqcl fyind8e f1k6fduh f1w7gpdv fk6fouc fjoy568 figsok6 f1s184ao f1mk8lai fnbmjn9 f1o700av f13mvf36 f1cmlufx f9n3di6 f1ids18y f1tx3yz7 f1deo86v f1eh06m1 f1iescvh fhgqx19 f1olyrje f1p93eir f1nev41a f1h8hb77 f1lqvz6u f10aw75t fsle3fq f17ae5zn\" title=\"https:\/\/2b-advice.com\/de\/aristotelis-zervos\/\" href=\"https:\/\/2b-advice.com\/en\/aristotelis-zervos\/\" rel=\"noreferrer noopener\" aria-label=\"Link author profile page.\"><strong>Author profile page<\/strong><\/a>.<\/em><\/p>\t\t\t\t\t\t\t\t<\/div>\n\t\t\t\t<\/div>\n\t\t\t\t<\/div>\n\t\t\t\t\t<\/div>\n\t\t\t\t<\/div>\n\t\t\t\t<\/div>","protected":false},"excerpt":{"rendered":"<p>This list of questions systematically guides you through the three-stage test and uses practical examples (including direct advertising and video surveillance) to show how a robust balancing of interests can be established, documented and implemented in a consistent manner in compliance practice.<\/p>","protected":false},"author":2,"featured_media":43139,"comment_status":"closed","ping_status":"closed","sticky":false,"template":"","format":"standard","meta":{"footnotes":""},"categories":[441,25],"tags":[476,242,475],"class_list":["post-43092","post","type-post","status-publish","format-standard","has-post-thumbnail","hentry","category-aristotelis-zervos","category-datenschutz-in-europa","tag-art-6-abs-1-lit-f-dsgvo","tag-berechtigtes-interesse-dsgvo","tag-hamburgische-beauftragten-fuer-datenschutz-und-informationsfreiheit"],"yoast_head":"<!-- This site is optimized with the Yoast SEO plugin v28.6 - https:\/\/yoast.com\/product\/yoast-seo-wordpress\/ -->\n<title>Drei-Stufen-Pr\u00fcfung zur Ermittlung des berechtigten Interesses: Diese Fragen sind entscheidend - Ailance<\/title>\n<meta name=\"description\" content=\"Dieser Fragenkatalog f\u00fchrt systematisch durch die Drei-Stufen-Pr\u00fcfung und erkl\u00e4rt mit praxisnahen Beispielen die Umsetzung.\" \/>\n<meta name=\"robots\" content=\"index, follow, max-snippet:-1, max-image-preview:large, max-video-preview:-1\" \/>\n<link rel=\"canonical\" href=\"https:\/\/2b-advice.com\/en\/2026\/01\/08\/three-stage-examination-to-determine-the-legitimate-interest-these-questions-are-decisive\/\" \/>\n<meta property=\"og:locale\" content=\"en_US\" \/>\n<meta property=\"og:type\" content=\"article\" \/>\n<meta property=\"og:title\" content=\"Drei-Stufen-Pr\u00fcfung zur Ermittlung des berechtigten Interesses: Diese Fragen sind entscheidend - Ailance\" \/>\n<meta property=\"og:description\" content=\"Dieser Fragenkatalog f\u00fchrt systematisch durch die Drei-Stufen-Pr\u00fcfung und erkl\u00e4rt mit praxisnahen Beispielen die Umsetzung.\" \/>\n<meta property=\"og:url\" content=\"https:\/\/2b-advice.com\/en\/2026\/01\/08\/three-stage-examination-to-determine-the-legitimate-interest-these-questions-are-decisive\/\" \/>\n<meta property=\"og:site_name\" content=\"Ailance\" \/>\n<meta property=\"article:published_time\" content=\"2026-01-08T10:03:11+00:00\" \/>\n<meta property=\"article:modified_time\" content=\"2026-06-22T08:34:23+00:00\" \/>\n<meta property=\"og:image\" content=\"https:\/\/2b-advice.com\/wp-content\/uploads\/2026\/01\/Drei-Stufen-Pruefung.jpg\" \/>\n\t<meta property=\"og:image:width\" content=\"1536\" \/>\n\t<meta property=\"og:image:height\" content=\"1024\" \/>\n\t<meta property=\"og:image:type\" content=\"image\/jpeg\" \/>\n<meta name=\"author\" content=\"Aristotelis\" \/>\n<meta name=\"twitter:card\" content=\"summary_large_image\" \/>\n<meta name=\"twitter:label1\" content=\"Written by\" \/>\n\t<meta name=\"twitter:data1\" content=\"Aristotelis\" \/>\n\t<meta name=\"twitter:label2\" content=\"Est. reading time\" \/>\n\t<meta name=\"twitter:data2\" content=\"13 minutes\" \/>\n<script type=\"application\/ld+json\" class=\"yoast-schema-graph\">{\"@context\":\"https:\\\/\\\/schema.org\",\"@graph\":[{\"@type\":\"Article\",\"@id\":\"https:\\\/\\\/2b-advice.com\\\/en\\\/2026\\\/01\\\/08\\\/drei-stufen-pruefung-zur-ermittlung-des-berechtigten-interesses-diese-fragen-sind-entscheidend\\\/#article\",\"isPartOf\":{\"@id\":\"https:\\\/\\\/2b-advice.com\\\/en\\\/2026\\\/01\\\/08\\\/drei-stufen-pruefung-zur-ermittlung-des-berechtigten-interesses-diese-fragen-sind-entscheidend\\\/\"},\"author\":{\"name\":\"Aristotelis\",\"@id\":\"https:\\\/\\\/2b-advice.com\\\/en\\\/#\\\/schema\\\/person\\\/dec1524f23a48487067598ae938bc8eb\"},\"headline\":\"Drei-Stufen-Pr\u00fcfung zur Ermittlung des berechtigten Interesses: Diese Fragen sind entscheidend\",\"datePublished\":\"2026-01-08T10:03:11+00:00\",\"dateModified\":\"2026-06-22T08:34:23+00:00\",\"mainEntityOfPage\":{\"@id\":\"https:\\\/\\\/2b-advice.com\\\/en\\\/2026\\\/01\\\/08\\\/drei-stufen-pruefung-zur-ermittlung-des-berechtigten-interesses-diese-fragen-sind-entscheidend\\\/\"},\"wordCount\":3076,\"publisher\":{\"@id\":\"https:\\\/\\\/2b-advice.com\\\/en\\\/#organization\"},\"image\":{\"@id\":\"https:\\\/\\\/2b-advice.com\\\/en\\\/2026\\\/01\\\/08\\\/drei-stufen-pruefung-zur-ermittlung-des-berechtigten-interesses-diese-fragen-sind-entscheidend\\\/#primaryimage\"},\"thumbnailUrl\":\"https:\\\/\\\/2b-advice.com\\\/wp-content\\\/uploads\\\/2026\\\/01\\\/Drei-Stufen-Pruefung.jpg\",\"keywords\":[\"Art. 6 Abs. 1 lit. f DSGVO\",\"Berechtigtes Interesse\",\"Hamburgische Beauftragten f\u00fcr Datenschutz und Informationsfreiheit\"],\"articleSection\":[\"Artikel von Aristotelis Zervos\",\"Datenschutz in Europa\"],\"inLanguage\":\"en-US\"},{\"@type\":\"WebPage\",\"@id\":\"https:\\\/\\\/2b-advice.com\\\/en\\\/2026\\\/01\\\/08\\\/drei-stufen-pruefung-zur-ermittlung-des-berechtigten-interesses-diese-fragen-sind-entscheidend\\\/\",\"url\":\"https:\\\/\\\/2b-advice.com\\\/en\\\/2026\\\/01\\\/08\\\/drei-stufen-pruefung-zur-ermittlung-des-berechtigten-interesses-diese-fragen-sind-entscheidend\\\/\",\"name\":\"Drei-Stufen-Pr\u00fcfung zur Ermittlung des berechtigten Interesses: Diese Fragen sind entscheidend - Ailance\",\"isPartOf\":{\"@id\":\"https:\\\/\\\/2b-advice.com\\\/en\\\/#website\"},\"primaryImageOfPage\":{\"@id\":\"https:\\\/\\\/2b-advice.com\\\/en\\\/2026\\\/01\\\/08\\\/drei-stufen-pruefung-zur-ermittlung-des-berechtigten-interesses-diese-fragen-sind-entscheidend\\\/#primaryimage\"},\"image\":{\"@id\":\"https:\\\/\\\/2b-advice.com\\\/en\\\/2026\\\/01\\\/08\\\/drei-stufen-pruefung-zur-ermittlung-des-berechtigten-interesses-diese-fragen-sind-entscheidend\\\/#primaryimage\"},\"thumbnailUrl\":\"https:\\\/\\\/2b-advice.com\\\/wp-content\\\/uploads\\\/2026\\\/01\\\/Drei-Stufen-Pruefung.jpg\",\"datePublished\":\"2026-01-08T10:03:11+00:00\",\"dateModified\":\"2026-06-22T08:34:23+00:00\",\"description\":\"Dieser Fragenkatalog f\u00fchrt systematisch durch die Drei-Stufen-Pr\u00fcfung und erkl\u00e4rt mit praxisnahen Beispielen die Umsetzung.\",\"breadcrumb\":{\"@id\":\"https:\\\/\\\/2b-advice.com\\\/en\\\/2026\\\/01\\\/08\\\/drei-stufen-pruefung-zur-ermittlung-des-berechtigten-interesses-diese-fragen-sind-entscheidend\\\/#breadcrumb\"},\"inLanguage\":\"en-US\",\"potentialAction\":[{\"@type\":\"ReadAction\",\"target\":[\"https:\\\/\\\/2b-advice.com\\\/en\\\/2026\\\/01\\\/08\\\/drei-stufen-pruefung-zur-ermittlung-des-berechtigten-interesses-diese-fragen-sind-entscheidend\\\/\"]}]},{\"@type\":\"ImageObject\",\"inLanguage\":\"en-US\",\"@id\":\"https:\\\/\\\/2b-advice.com\\\/en\\\/2026\\\/01\\\/08\\\/drei-stufen-pruefung-zur-ermittlung-des-berechtigten-interesses-diese-fragen-sind-entscheidend\\\/#primaryimage\",\"url\":\"https:\\\/\\\/2b-advice.com\\\/wp-content\\\/uploads\\\/2026\\\/01\\\/Drei-Stufen-Pruefung.jpg\",\"contentUrl\":\"https:\\\/\\\/2b-advice.com\\\/wp-content\\\/uploads\\\/2026\\\/01\\\/Drei-Stufen-Pruefung.jpg\",\"width\":1536,\"height\":1024,\"caption\":\"Dieser Fragenkatalog f\u00fchrt systematisch durch die Drei-Stufen-Pr\u00fcfung und erkl\u00e4rt mit praxisnahen Beispielen die Umsetzung.\"},{\"@type\":\"BreadcrumbList\",\"@id\":\"https:\\\/\\\/2b-advice.com\\\/en\\\/2026\\\/01\\\/08\\\/drei-stufen-pruefung-zur-ermittlung-des-berechtigten-interesses-diese-fragen-sind-entscheidend\\\/#breadcrumb\",\"itemListElement\":[{\"@type\":\"ListItem\",\"position\":1,\"name\":\"Home\",\"item\":\"https:\\\/\\\/2b-advice.com\\\/de\\\/\"},{\"@type\":\"ListItem\",\"position\":2,\"name\":\"Drei-Stufen-Pr\u00fcfung zur Ermittlung des berechtigten Interesses: Diese Fragen sind entscheidend\"}]},{\"@type\":\"WebSite\",\"@id\":\"https:\\\/\\\/2b-advice.com\\\/en\\\/#website\",\"url\":\"https:\\\/\\\/2b-advice.com\\\/en\\\/\",\"name\":\"2B Advice\",\"description\":\"By 2B Advice\",\"publisher\":{\"@id\":\"https:\\\/\\\/2b-advice.com\\\/en\\\/#organization\"},\"potentialAction\":[{\"@type\":\"SearchAction\",\"target\":{\"@type\":\"EntryPoint\",\"urlTemplate\":\"https:\\\/\\\/2b-advice.com\\\/en\\\/?s={search_term_string}\"},\"query-input\":{\"@type\":\"PropertyValueSpecification\",\"valueRequired\":true,\"valueName\":\"search_term_string\"}}],\"inLanguage\":\"en-US\"},{\"@type\":\"Organization\",\"@id\":\"https:\\\/\\\/2b-advice.com\\\/en\\\/#organization\",\"name\":\"2B Advice GmbH\",\"url\":\"https:\\\/\\\/2b-advice.com\\\/en\\\/\",\"logo\":{\"@type\":\"ImageObject\",\"inLanguage\":\"en-US\",\"@id\":\"https:\\\/\\\/2b-advice.com\\\/en\\\/#\\\/schema\\\/logo\\\/image\\\/\",\"url\":\"https:\\\/\\\/2b-advice.com\\\/wp-content\\\/uploads\\\/2024\\\/02\\\/Ailance_Logo_Yellow_White_large_RGB.png\",\"contentUrl\":\"https:\\\/\\\/2b-advice.com\\\/wp-content\\\/uploads\\\/2024\\\/02\\\/Ailance_Logo_Yellow_White_large_RGB.png\",\"width\":287,\"height\":401,\"caption\":\"2B Advice GmbH\"},\"image\":{\"@id\":\"https:\\\/\\\/2b-advice.com\\\/en\\\/#\\\/schema\\\/logo\\\/image\\\/\"},\"sameAs\":[\"https:\\\/\\\/www.linkedin.com\\\/company\\\/2b-advice-group\\\/\"]},{\"@type\":\"Person\",\"@id\":\"https:\\\/\\\/2b-advice.com\\\/en\\\/#\\\/schema\\\/person\\\/dec1524f23a48487067598ae938bc8eb\",\"name\":\"Aristotelis\"}]}<\/script>\n<!-- \/ Yoast SEO plugin. -->","yoast_head_json":{"title":"Three-step test for determining legitimate interest: these questions are crucial - Ailance","description":"This questionnaire systematically guides you through the three-stage exam and explains how to implement it with practical examples.","robots":{"index":"index","follow":"follow","max-snippet":"max-snippet:-1","max-image-preview":"max-image-preview:large","max-video-preview":"max-video-preview:-1"},"canonical":"https:\/\/2b-advice.com\/en\/2026\/01\/08\/three-stage-examination-to-determine-the-legitimate-interest-these-questions-are-decisive\/","og_locale":"en_US","og_type":"article","og_title":"Drei-Stufen-Pr\u00fcfung zur Ermittlung des berechtigten Interesses: Diese Fragen sind entscheidend - Ailance","og_description":"Dieser Fragenkatalog f\u00fchrt systematisch durch die Drei-Stufen-Pr\u00fcfung und erkl\u00e4rt mit praxisnahen Beispielen die Umsetzung.","og_url":"https:\/\/2b-advice.com\/en\/2026\/01\/08\/three-stage-examination-to-determine-the-legitimate-interest-these-questions-are-decisive\/","og_site_name":"Ailance","article_published_time":"2026-01-08T10:03:11+00:00","article_modified_time":"2026-06-22T08:34:23+00:00","og_image":[{"width":1536,"height":1024,"url":"https:\/\/2b-advice.com\/wp-content\/uploads\/2026\/01\/Drei-Stufen-Pruefung.jpg","type":"image\/jpeg"}],"author":"Aristotelis","twitter_card":"summary_large_image","twitter_misc":{"Written by":"Aristotelis","Est. reading time":"13 minutes"},"schema":{"@context":"https:\/\/schema.org","@graph":[{"@type":"Article","@id":"https:\/\/2b-advice.com\/en\/2026\/01\/08\/drei-stufen-pruefung-zur-ermittlung-des-berechtigten-interesses-diese-fragen-sind-entscheidend\/#article","isPartOf":{"@id":"https:\/\/2b-advice.com\/en\/2026\/01\/08\/drei-stufen-pruefung-zur-ermittlung-des-berechtigten-interesses-diese-fragen-sind-entscheidend\/"},"author":{"name":"Aristotelis","@id":"https:\/\/2b-advice.com\/en\/#\/schema\/person\/dec1524f23a48487067598ae938bc8eb"},"headline":"Drei-Stufen-Pr\u00fcfung zur Ermittlung des berechtigten Interesses: Diese Fragen sind entscheidend","datePublished":"2026-01-08T10:03:11+00:00","dateModified":"2026-06-22T08:34:23+00:00","mainEntityOfPage":{"@id":"https:\/\/2b-advice.com\/en\/2026\/01\/08\/drei-stufen-pruefung-zur-ermittlung-des-berechtigten-interesses-diese-fragen-sind-entscheidend\/"},"wordCount":3076,"publisher":{"@id":"https:\/\/2b-advice.com\/en\/#organization"},"image":{"@id":"https:\/\/2b-advice.com\/en\/2026\/01\/08\/drei-stufen-pruefung-zur-ermittlung-des-berechtigten-interesses-diese-fragen-sind-entscheidend\/#primaryimage"},"thumbnailUrl":"https:\/\/2b-advice.com\/wp-content\/uploads\/2026\/01\/Drei-Stufen-Pruefung.jpg","keywords":["Art. 6 Abs. 1 lit. f DSGVO","Berechtigtes Interesse","Hamburgische Beauftragten f\u00fcr Datenschutz und Informationsfreiheit"],"articleSection":["Artikel von Aristotelis Zervos","Datenschutz in Europa"],"inLanguage":"en-US"},{"@type":"WebPage","@id":"https:\/\/2b-advice.com\/en\/2026\/01\/08\/drei-stufen-pruefung-zur-ermittlung-des-berechtigten-interesses-diese-fragen-sind-entscheidend\/","url":"https:\/\/2b-advice.com\/en\/2026\/01\/08\/drei-stufen-pruefung-zur-ermittlung-des-berechtigten-interesses-diese-fragen-sind-entscheidend\/","name":"Three-step test for determining legitimate interest: these questions are crucial - Ailance","isPartOf":{"@id":"https:\/\/2b-advice.com\/en\/#website"},"primaryImageOfPage":{"@id":"https:\/\/2b-advice.com\/en\/2026\/01\/08\/drei-stufen-pruefung-zur-ermittlung-des-berechtigten-interesses-diese-fragen-sind-entscheidend\/#primaryimage"},"image":{"@id":"https:\/\/2b-advice.com\/en\/2026\/01\/08\/drei-stufen-pruefung-zur-ermittlung-des-berechtigten-interesses-diese-fragen-sind-entscheidend\/#primaryimage"},"thumbnailUrl":"https:\/\/2b-advice.com\/wp-content\/uploads\/2026\/01\/Drei-Stufen-Pruefung.jpg","datePublished":"2026-01-08T10:03:11+00:00","dateModified":"2026-06-22T08:34:23+00:00","description":"This questionnaire systematically guides you through the three-stage exam and explains how to implement it with practical examples.","breadcrumb":{"@id":"https:\/\/2b-advice.com\/en\/2026\/01\/08\/drei-stufen-pruefung-zur-ermittlung-des-berechtigten-interesses-diese-fragen-sind-entscheidend\/#breadcrumb"},"inLanguage":"en-US","potentialAction":[{"@type":"ReadAction","target":["https:\/\/2b-advice.com\/en\/2026\/01\/08\/drei-stufen-pruefung-zur-ermittlung-des-berechtigten-interesses-diese-fragen-sind-entscheidend\/"]}]},{"@type":"ImageObject","inLanguage":"en-US","@id":"https:\/\/2b-advice.com\/en\/2026\/01\/08\/drei-stufen-pruefung-zur-ermittlung-des-berechtigten-interesses-diese-fragen-sind-entscheidend\/#primaryimage","url":"https:\/\/2b-advice.com\/wp-content\/uploads\/2026\/01\/Drei-Stufen-Pruefung.jpg","contentUrl":"https:\/\/2b-advice.com\/wp-content\/uploads\/2026\/01\/Drei-Stufen-Pruefung.jpg","width":1536,"height":1024,"caption":"Dieser Fragenkatalog f\u00fchrt systematisch durch die Drei-Stufen-Pr\u00fcfung und erkl\u00e4rt mit praxisnahen Beispielen die Umsetzung."},{"@type":"BreadcrumbList","@id":"https:\/\/2b-advice.com\/en\/2026\/01\/08\/drei-stufen-pruefung-zur-ermittlung-des-berechtigten-interesses-diese-fragen-sind-entscheidend\/#breadcrumb","itemListElement":[{"@type":"ListItem","position":1,"name":"Home","item":"https:\/\/2b-advice.com\/de\/"},{"@type":"ListItem","position":2,"name":"Drei-Stufen-Pr\u00fcfung zur Ermittlung des berechtigten Interesses: Diese Fragen sind entscheidend"}]},{"@type":"WebSite","@id":"https:\/\/2b-advice.com\/en\/#website","url":"https:\/\/2b-advice.com\/en\/","name":"2B Advice","description":"By 2B Advice","publisher":{"@id":"https:\/\/2b-advice.com\/en\/#organization"},"potentialAction":[{"@type":"SearchAction","target":{"@type":"EntryPoint","urlTemplate":"https:\/\/2b-advice.com\/en\/?s={search_term_string}"},"query-input":{"@type":"PropertyValueSpecification","valueRequired":true,"valueName":"search_term_string"}}],"inLanguage":"en-US"},{"@type":"Organization","@id":"https:\/\/2b-advice.com\/en\/#organization","name":"2B Advice GmbH","url":"https:\/\/2b-advice.com\/en\/","logo":{"@type":"ImageObject","inLanguage":"en-US","@id":"https:\/\/2b-advice.com\/en\/#\/schema\/logo\/image\/","url":"https:\/\/2b-advice.com\/wp-content\/uploads\/2024\/02\/Ailance_Logo_Yellow_White_large_RGB.png","contentUrl":"https:\/\/2b-advice.com\/wp-content\/uploads\/2024\/02\/Ailance_Logo_Yellow_White_large_RGB.png","width":287,"height":401,"caption":"2B Advice GmbH"},"image":{"@id":"https:\/\/2b-advice.com\/en\/#\/schema\/logo\/image\/"},"sameAs":["https:\/\/www.linkedin.com\/company\/2b-advice-group\/"]},{"@type":"Person","@id":"https:\/\/2b-advice.com\/en\/#\/schema\/person\/dec1524f23a48487067598ae938bc8eb","name":"Aristotle"}]}},"_links":{"self":[{"href":"https:\/\/2b-advice.com\/en\/wp-json\/wp\/v2\/posts\/43092","targetHints":{"allow":["GET"]}}],"collection":[{"href":"https:\/\/2b-advice.com\/en\/wp-json\/wp\/v2\/posts"}],"about":[{"href":"https:\/\/2b-advice.com\/en\/wp-json\/wp\/v2\/types\/post"}],"author":[{"embeddable":true,"href":"https:\/\/2b-advice.com\/en\/wp-json\/wp\/v2\/users\/2"}],"replies":[{"embeddable":true,"href":"https:\/\/2b-advice.com\/en\/wp-json\/wp\/v2\/comments?post=43092"}],"version-history":[{"count":65,"href":"https:\/\/2b-advice.com\/en\/wp-json\/wp\/v2\/posts\/43092\/revisions"}],"predecessor-version":[{"id":44475,"href":"https:\/\/2b-advice.com\/en\/wp-json\/wp\/v2\/posts\/43092\/revisions\/44475"}],"wp:featuredmedia":[{"embeddable":true,"href":"https:\/\/2b-advice.com\/en\/wp-json\/wp\/v2\/media\/43139"}],"wp:attachment":[{"href":"https:\/\/2b-advice.com\/en\/wp-json\/wp\/v2\/media?parent=43092"}],"wp:term":[{"taxonomy":"category","embeddable":true,"href":"https:\/\/2b-advice.com\/en\/wp-json\/wp\/v2\/categories?post=43092"},{"taxonomy":"post_tag","embeddable":true,"href":"https:\/\/2b-advice.com\/en\/wp-json\/wp\/v2\/tags?post=43092"}],"curies":[{"name":"wp","href":"https:\/\/api.w.org\/{rel}","templated":true}]}}