1.

Is Article 22(1) of Regulation (EU) 2016/679 (1) to be interpreted as meaning that the automated establishment of a probability value concerning the ability of a data subject to service a loan in the future already constitutes a decision based solely on automated processing, including profiling, which produces legal effects concerning the data subject or similarly significantly affects him or her, where that value, determined by means of personal data of the data subject, is transmitted by the controller to a third-party controller and the latter draws strongly on that value for its decision on the establishment, implementation or termination of a contractual relationship with the data subject?

2.

If Question 1 is answered in the negative, are Articles 6(1) and 22 of Regulation (EU) 2016/679 to be interpreted as precluding national legislation under which the use of a probability value — in casu, in relation to a natural person’s ability and willingness to pay, in the case where information about claims against that person is taken into account — regarding specific future behaviour of a natural person for the purpose of deciding on the establishment, implementation or termination of a contractual relationship with that person (scoring) is permissible only if certain further conditions, which are set out in more detail in the grounds of the request for a preliminary ruling, are met?