Any exchange of data requires a legal basis. This fundamental principle applies not only for the data transfer from one controller to a different external third party. This principle equally applies to data transfer from one legal entity to another…
Ban of Facebook Customs Audience – decision of German DPA upheld
The ban of a German Federal DPA (state of Bavaria) on an online shop for using Facebook Customs Audience has been upheld by the respective Administrative court. In an injunction the Administrative court stated that the decision of the Bavarian…
Fan pages jointly liable with Facebook – landmark of ECJ
The ECJ decided that the administrator of a fan page on Facebook is responsible for the respective data processing.[1] The administrator is ´joint controller’ together with Facebook. That means administrators cannot close its eyes whether Facebook is infringing GDPR. In…
How to “provide“ information (Art. 12 GDPR)? European Court of Justice requires active behavior
The controller shall inform the data subject about the extent of the data processing (Art. 13 GDPR). But what measures are required to “provide“ this information to the data subject according to Art. 12 GDPR? Is it necessary to send…