Joined Cases C-26/22 and C-64/22, SCHUFA Holding (Discharge from remaining debts): Judgment of the Court (First Chamber) of 7 December 2023 (requests for a preliminary ruling from the Verwaltungsgericht Wiesbaden — Germany) — UF (C-26/22), AB (C-64/22) v Land Hessen (Reference for a preliminary ruling — Protection of natural persons with regard to the processing of personal data — Regulation (EU) 2016/679 — Article 5(1)(a) — Principle of ‘lawfulness’ — Point (f) of the first subparagraph of Article 6(1) — Necessity of processing for the purposes of the legitimate interests pursued by the controller or by a third party — Article 17(1)(d) — Right to erasure where personal data have been unlawfully processed — Article 40 — Codes of conduct — Article 78(1) — Right to an effective judicial remedy against a supervisory authority — Decision taken by the supervisory authority on a complaint — Scope of judicial review of that decision — Credit information agencies — Storage of data from a public register relating to the discharge of remaining debts in favour of a person — Storage period)