Skip to content

You are viewing the classic layout. Switch to the new layout

Case Law·Regional Court Frankfurt am Main·2-06 O 234/25EN
Export

LG Frankfurt am Main - 2-06 O 234/25

StatusNot cited by any decision here yet

Judgment

Holding

The court held that the defendant was liable for fake profiles on its social media platforms under the DSA. It granted the injunction and damages claimed by the plaintiffs. As the plaintiffs' claims were already granted on other grounds, the data protection claims further asserted to support the lawsuit were no longer relevant and therefore not assessed by the court in detail. However, the court pointed out that a claim for injunctive relief could not solely be based on Article 17 GDPR or the GDPR directly. First, the court ordered the defendant to refrain from publishing and/or distributing infringing third-party content on its platforms without the plaintiffs' consent. The court based its decision to grant the injunction on the company's corporate personality rights and corporate trademark as well as the co-founders right to his own image and right to his name. It held that the defendant was directly liable for the infringing content and could not invoke the liability exemption for hosting service providers in Article 6 DSA. Regarding the defendant’s direct liability, the court argued the defendant exercised control over the content and was not just a neutral, passive hosting provider. The court pointed out that the defendant's ranking algorithm makes decisions about which ad is shown to which user and when or whose feed other content than ads appears in. According to the court, this algorithmic dissemination of third-party content therefore serves the defendant's own economic interests. The court referred to the CJEU's decision in the cases the cases C-188/24, C-190/24 – WebGroup and Coyote System to support its conclusion. In this judgment, the CJEU ruled that an operator exercises control over the algorithmic dissemination of third-party content if the algorithm goes beyond merely categorising and indexing information and determines how the information is broadcast. Second, the court ordered the defendant to compensate the plaintiffs for the damages they have incurred and/or will incur in the future as a result of the dissemination of the infringing content. The court was able to grant damages and monetary compensation because the defendant was liable as the perpetrator, not only as an indirect infringer. Finally, the court ordered to defendant to provide the plaintiffs information on the extent to which infringing content was distributed, accessed, or made publicly available. The defendant was also obligated to provide a breakdown of the revenue generated by the dissemination of fake content.

From GDPRhub’s case note — a summary of the decision, not its own words.Read it in the text ↓

Summary

Facts — A company operating a financial education portal and a YouTube channel with about 1,5 million subscribers and one of its co-founders (the plaintiffs) had repeatedly requested the operator of two large social media platforms (the defendant) to erase content posted by fake accounts. Users not associated with the plaintiffs had created profiles and posted advertisements under names resembling the plaintiffs' trade marks as well as featuring photos and deepfake videos of the co-founder. If users of the social media platforms followed the links in the posts, they were directed to groups on the defendant’s messaging app where fraudulent investment options were promoted. The plaintiffs had reported these incidents using the defendant's "Brand Rights Protection Tool", reported approximately 256 violations within a month, assigned a full-time employee to monitor the violations, and sent the defendant a formal legal warning. Erasing the infringing content took between 0 and 62 days, and more fake content appeared almost daily. Following the unsuccessful attempts to get the content removed, the plaintiffs filed a lawsuit requesting an injunction and damages. They based their claims on provisions of copyright law, data protection law, trademark law, and personality rights. The plaintiffs argued that the defendant could not invoke the liability exemption for hosting service providers under Article 6 DSA. They also stated that the co-founder featured in the infringing content could base his claims on Articles 17 and 82 GDPR for the injunction and damages respectively, as the photos and videos featured in the fake content contained the co-founder’s personal data. According to the plaintiffs, the defendant was acting as a joint controller within the meaning of Article 26 GDPR with the profile owner or advertiser.

Full text115paragraphs

Machine translation of the decision, via GDPRhub — not the official text.Read the original

Paragraphs carrying a topic or an applied provision show those connections inline
§

Frankfurt am Main Regional Court, Judgement of September 16, 2026, Case No. 2-06 O 234/25 6th Civil Chamber | REWIS RS 2026, 8634 Financial Flow: Liability for Fake Profiles—On the liability of a social media platform operator for fake profiles in the context of algorithmically determined content display, in accordance with the CJEU rulings in Webgroup and Coyote (C-188/24, C-190/24). Operative Part The defendant is ordered, on pain of a fine of up to EUR 250,000.00 to be determined by the Court for each instance of noncompliance, and, in the event that such fine cannot be collected, to serve a term of detention or a term of detention of up to six months, which shall be enforced against its legal representatives, to refrain, with respect to Plaintiff No. 1, from publishing and/or distributing third-party content on its platforms A and/or B without the consent of Plaintiff No. 1, and/or from causing third parties to perform such acts, where contain images in which Plaintiff No. 2 is depicted, even though such content does not originate from Plaintiff No. 1, if this occurs as evident from Exhibits K22, K24, K28, K29, and K33; and/or contain the mark “F” verbatim or in a modified form, even though this content does not originate from Plaintiff No. 1, if this occurs as evident from Exhibits K24, K28, K29, and K33.

§

The defendant is ordered, on pain of a fine of up to EUR 250,000.00 to be determined by the Court for each instance of infringement, and, in the event that such fine cannot be collected, to serve a term of detention or a term of detention of up to six months, to be enforced against its legal representatives, to refrain, with respect to Plaintiff No. 2, from publishing and/or distributing third-party content on its platforms A and/or B without the consent of Plaintiff No. 2, and/or from having such actions performed by third parties that feature images of Plaintiff No. 2, even though such content does not originate from Plaintiff No. 2 in the lawsuit, if this occurs as evident from Exhibits K22, 24, 26, 28–31, and 33; and/or contain, verbatim or in essence, the name “[Plaintiff No. 2]” even though such content does not originate from Plaintiff No. 2, where this occurs as shown in Exhibits K22 and K26.

§

The defendant is ordered to provide the plaintiffs with information regarding the extent to which the content specified in paragraphs 1 and 2, and content with the same meaning, was distributed on platforms A and B, accessed, and/or made publicly available, by submitting a organized list sorted by URL, the respective total number of views, and a breakdown of the revenue generated by the Defendant as a result. It is hereby declared that the Defendant is obligated to compensate the plaintiffs for the damages they have incurred and/or will incur in the future as a result of the dissemination of the infringing acts described in paragraphs 1 and 2 and those of equivalent content, including those resulting from further dissemination by third parties; to pay Plaintiff No. 2 an amount, the specific amount of which is left to the discretion of the Court, to compensate for the non-economic damages he suffered as a result of the dissemination of the infringing acts set forth in Paragraph 2 and similar acts; The defendant is ordered to pay the plaintiffs EUR 3,568.81 plus interest at a rate of 5 percentage points above the respective base interest rate as of July 26, 2026.

§

In all other respects, the lawsuit is dismissed. With respect to the court costs and the defendant’s out-of-court costs, Plaintiff No. 1 shall bear 10% and the defendant 90%; with respect to Plaintiff No. 1’s out-of-court costs, Plaintiff No. 1 shall bear 15% and the defendant 85%; the defendant shall bear the out-of-court costs of Plaintiff No. 2. The judgement is final for Plaintiff No. 1 with respect to points 1.a) and 1.b) of the operative part, in the amount of 50,000.00 EUR each; for Plaintiff No. 2 with respect to points 2.a) and 2.b) of the operative part, in the amount of 50,000.00 EUR each, and with respect to point 4.b) of the operative part, in the amount of 20,000.00 EUR; for both plaintiffs, with respect to the operative part under 3 in the amount of 10,000.00 EUR and under 4.a) in the amount of 20,000.00 EUR, and, in all other respects, provisionally enforceable upon the provision of security in the amount of 100% of the respective amount to be enforced.

§

Facts of the Case The parties are in dispute over claims arising from copyright law, enterprise and personality rights, data protection law, and trademark law in connection with “fake accounts,” “fake profiles,” and “fake ads” (advertisements) on platforms B and A. Plaintiff No. 1 operates an internet portal under the company name “F” via its website www.F.de, which features comparison tools and review reports for financial products such as checking accounts, brokerage accounts, credit cards, and both overnight and fixed-term deposit accounts (Exhibit K1). The website also features a consumer guide on financial topics. The website serves to provide free financial education to private individuals. The enterprise and the website of Plaintiff No. 1) originated from the YouTube channel @F, which Plaintiff No. 2) and the co-founder of Plaintiff No. 1), Mr. K, have been running for nine years.

§

Plaintiff 1’s channel currently has 1.5 million subscribers (Exhibit K2). Plaintiff 2 is one of the founders and managing directors of Plaintiff 1. The defendant is the controller in the EU for the operation of the “B” and “A” platforms, each of which has approximately 3 billion monthly active Users (Exhibit K43, p. 710 of the record). The defendant requires users to comply with the respective platform guidelines. It has implemented community standards regarding “fraud, scams, and deceptive practices” as well as “advertising standards” and terms of use (Exhibits B5 and B6). It employs technical methods to detect and block fake accounts, for example, when an unusually high number of accounts are created from a single location, or when suspicious email addresses or activities are detected. The defendant also uses tools it has developed, such as the Intellectual Property Reporting API, Rights Manager, Brand Rights Protection Tool, special reporting forms, and the IP Help Center (Exhibits B8 through B13).

§

Using the Brand Rights Protection Tool, rights holders can register their word and figurative marks, search the defendant’s platforms for content that infringes these marks using keywords, phrases, or URLs, and report such content, which is then reviewed and, if necessary, removed. Rights holders can also upload up to 200 reference images. In addition, it provides facial recognition software to detect and delete fraudulent content (see Exhibit B15). The plaintiffs dispute the effectiveness of these measures. Plaintiff No. 1 operates a B account on the defendant’s platforms under the handle “@F,” which—at the time the complaint was filed—had over 600,000 followers, as well as an A account under the handle “F” with nearly 29,000 followers (see Exhibit K4, p. 110 of the record). All posts for which the plaintiffs are responsible are distributed exclusively via the accounts with the handles “@F” and “F,” respectively.

§

Plaintiff No. 1 does not place any advertisements on the defendant’s platforms. Plaintiff No. 1 is the owner of the German word and figurative mark DE ... [Mark1], filed on March 18, 2022, which claims protection, among other things, for the services “advertising in electronic media and specifically on the Internet,” “advertising and marketing services provided via social media” (each in Nice Class 35) and the “provision of audio and visual media via communication networks” (Nice Class 41) (Exhibit K8, p. 115 of the record). Plaintiff No. 1 is also the owner of the German word mark “F” (DE ...), which claims protection for, among other things, the services “advertising, marketing, and sales promotion” (Nice Class 35), “computer-assisted provision of information in the field of finance,” “online information services regarding finance provided from a computer database or the Internet” (Nice Class 36), “education, training, entertainment, and sports activities,” as well as “video production” (Nice Class 41) (Exhibit K9, pp. 118 et seq. of the record), filed on January 25, 2025.

§

Plaintiff No. 1) also uses the designation “F” in the course of business to specifically identify its enterprise. Plaintiff No. 2 is, among other things, the public face of Plaintiff No. 1 due to his participation in numerous videos and all social media posts, as well as the podcast “...,” which now has at least 149 episodes. He is regularly featured in the photographs and image collages used by Plaintiff No. 1 in the lawsuit and is interviewed by national news and industry portals. He is co-author of the nonfiction book “D,” which ranked No. 1 on *Der Spiegel*’s nonfiction bestseller list and is now in its ... edition. He is also a regular columnist for ... as well as for ... (see Exhibit K5, pp. 112 ff. of the file). The plaintiffs are held in particularly high regard by the target audience in question. For some time now, user accounts not associated with the plaintiffs have been publishing on the platforms of Defendants B and A, using the designation “F” and the trademarks of Plaintiff No. 1, as well as the name and likeness of Plaintiff No. 2, in which they address topics related to the financial markets (Exhibit K14, p. 176 of the record).

§

The posts and advertisements are published under the usernames F, [... names partly similar to the trademarks of Plaintiff 1 and the name of Plaintiff 2 ...]. The advertisements are labeled “Ad” and are distributed by the defendant at the advertisers’ expense. In some cases, the posts are not booked through the advertisers’ own accounts but through an M-Advertising account. The photographs of Plaintiff No. 2 used in the posts all originate from the various websites of Plaintiff No. 1. If users follow the links in the posts, they are generally directed—either directly or after first completing an online questionnaire—to closed groups on “W,” a messaging app associated with the defendant ... In these chats, certain forms of investment are touted with what is presumed to be fraudulent intent (see Exhibit K15, pp. 143 ff. of the file). Several aggrieved users have therefore already contacted the plaintiffs in the past (see Exhibit K16, pp. 152 et seq. of the file).

§

The plaintiffs are not affiliated with the users who posted the content, nor have they given their consent to the use of the photographs or the name of Plaintiff No. 2 and the image collages, the trademarks of Plaintiff No. 1 or parts thereof, or the “F” symbol of Plaintiff No. 1. The plaintiffs regularly reported the disputed posts and advertisements via the defendant’s “Brand Rights Protection Tool” (see Exhibit K17, pp. 154 ff. of the record). They submitted the reference images provided as Exhibit K7 (pp. 164 et seq. of the file) and reported approximately 256 violations during the period from July 29, 2024, to August 28, 2024 (Exhibit K18, p. 51 of the record). The content in question has now been completely removed. Subsequently, numerous new identical or substantially similar advertisements were published. The plaintiffs initially attempted, without success, to contact the defendant directly and then retained the services of ...

§

GmbH, a company specializing in content removal. The plaintiffs then issued a cease-and-desist letter to the defendant via their attorney on October 1, 2024 (Exhibit K6, p. 56 of the file) and informed the defendant that they were the rights holders and that publications on the defendant’s platforms were to be considered unlawful whenever they contain the photographs included in Annex 2 thereof (= Exhibit K7 herein, p. 164 et seq.) and/or an account name containing the element “F” and/or “[Plaintiff No. 2],” possibly in different spellings, and/or contained the protected word/figurative mark [Mark 1] of Plaintiff 1), none of which were published under the aforementioned handles of Plaintiff 1) (see Exhibit K6, p. 69 of the record, under item 1.d). The parties subsequently engaged in settlement discussions. During these discussions, the defendant offered to include Plaintiff No. 2 in its facial recognition program, an offer that the plaintiffs did not initially accept.

§

However, the plaintiffs did participate in a “Brand Rights Protection Tool” training session offered by the defendant. A proposal was also on the table to activate a direct reporting channel from the plaintiffs to the law firm representing the defendant and to make a compensation payment to the plaintiffs. However, a settlement was not reached. The infringements increased, and in some cases it took weeks for infringing content to be removed. On the plaintiffs’ side, a full-time employee is dedicated to monitoring the platforms and reporting infringements. Subsequently, the following additional profiles and content, among others, were created: An “A” profile was created under the name “[Plaintiff No. 2]” (Exhibit K22, p. 157 of the file). In doing so, the plaintiff’s likenesses (Exhibit K7, p. 164, and presumably also p. 165 of the file) and name were used. The plaintiffs became aware of this on May 30, 2025, and reported the infringement on May 30, 2025, via the defendant’s Brand Rights Protection Tool (Exhibit K23, p. 200 of the file).

§

The removal process took 20 days (see p. 559 of the record). Another A-profile was created under the name “[Plaintiff No. 2]” using the name and likenesses of Plaintiff No. 2 (Exhibit K7, presumably p. 173 of the record). The plaintiffs became aware of this on June 5, 2025, and reported the violation on the same day (Exhibits K26 and K27, pp. 156, 159 of the record). The content remained online for 14 days (see p. 559 of the case file). A B-profile “F1” was created (Exhibit K24, p. 158 of the file). In doing so, images of Plaintiff No. 2 as well as the word mark “F” were used. The plaintiffs became aware of this on June 4, 2025, and reported the infringement on the same day via the Brand Rights Protection Tool (Exhibit K25). The removal took 4 days (see p. 559 of the record). Another B profile, “_F” (Exhibit K28, p. 160 of the file), contained images of Plaintiff No. 2 and the word mark “F.”

§

The lawsuits became aware of this and reported it via the Brand Rights Protection Tool on June 5, 2025. The profile was deleted on the same day (see p. 560 of the record). The A profile “...” (Exhibit K29) contained images of Plaintiff No. 2 and the word mark “F.” The plaintiffs became aware of this on June 5, 2025; according to the plaintiffs, the report was filed on June 5, 2025 (Exhibits K27 and K29). The deletion period was 14 days (p. 560 of the record). Furthermore, under the profile “...” on A, an advertisement was created featuring an AI-generated deepfake video of Plaintiff No. 2 with alleged investment tips in a WhatsApp group (Exhibit K30, p. 102 of the record). The video did not originate from Plaintiff No. 2. The plaintiffs became aware of it on June 5, 2025. According to the plaintiffs, the infringement was reported on the same day via the Brand Rights Protection Tool (Exhibit K32).

§

According to the defendant, the advertisement ran from June 3 to June 15, 2025, and was accessible online at least during that period. According to the defendant, more than 5,000 Users viewed the advertisement (Exhibit K30). Based on the plaintiffs’ alleged report in connection with the lawsuit, the duration of the removal was 62 days (p. 560 of the record). The plaintiffs became aware of Profile “F” (Exhibit K33, p. 103 of the record), which featured images of Plaintiff No. 2) (Exhibit K7, p. 167 of the record) and the trademarks of Plaintiff No. 1, the plaintiffs became aware of the content on June 5, 25. All of this content has since been deleted, although the defendant took between 0 and 62 days to do so (according to the plaintiffs’ submission) (see table on pp. 559 ff. of the record). After the lawsuit was filed, Plaintiff No. 2 gave his consent to the defendant’s facial recognition program via email dated September 24, 2025 (Exhibit K41, p. 482).

§

Subsequently, however, new infringing content using images of Plaintiff No. 2 was published almost daily, for example in November 2025 (Exhibit K42, p. 483 of the record). The plaintiffs allege that the photographs and image collages distributed on Plaintiff No. 1’s accounts were created by employees of Plaintiff No. 1. The employees granted Plaintiff No. 1 all exclusive rights of use to the videos and photographs created (see Exhibit K7, p. 164 et seq. of the record). The defendant’s core business consists of the sale of advertising space (see Exhibit K37). The defendant exercises significant influence over how and to whom user-generated content—including user profiles and advertisements—is distributed on its services, B and A (Exhibit K45). The distribution of user-generated content that is not displayed as advertisements is also specifically controlled by the defendant on its services (Exhibit K46).

§

Furthermore, user content that is not labeled as an “Ad” may contain promotional content. The defendant’s measures against fake accounts and fake ads are therefore either ineffective or are implemented only half-heartedly in order to profit from advertising revenue. Consequently, the defendant also strategically delays the erasure of such content. The defendant is capable of using automated processes to filter content based on word choice to determine whether it is of an advertising nature. Furthermore, many of the ads are also labeled as “Ad” (advertisement in the sense of a paid ad) (see Exhibit K18). In any case, the defendant is able to pre-filter content with the same meaning based on the images and the name of Plaintiff No. 2, the word/figurative mark, and the “F” designation. A manual assessment of the context is necessary only in individual cases. Journalistic or satirical discussions are easily recognizable at a glance.

§

Plaintiff No. 1 is of the opinion that it is entitled to a claim for injunctive relief against the defendant under § 97(1), para 1, alternative 1 of the German Copyright Act (UrhG) in conjunction with §§ 1(1), 7(1) of the German Copyright Act for the Media (UrhDaG), §§ 823(1), 824(1), and 1004(1) of the German Civil Code (BGB) by analogy in conjunction with Art. 1(2) in conjunction with Art. 1(1) and Art. 19(3) of the German Basic Law (GG) to (Claim 1a). Plaintiff No. 1 is entitled to a copyright-based claim for injunctive relief under §§ 97(1), para 1, alternative 1, of the German Copyright Act (UrhG) in conjunction with §§ 1(1), 7(1) of the German Digital Copyright Act (UrhDaG). Plaintiff 1) has standing to file a lawsuit. The defendant is a service provider within the meaning of Section 2(1) of the UrhDaG. Given that approximately 95 million photos and videos are uploaded daily to B alone, the purpose of storage and making content publicly available is, in any event, pursued not only for the sale of advertising space but also to facilitate communication among Users.

§

The defendant’s services are substitutable with audio or video streaming services. In this regard, the plaintiffs in the lawsuits argue that both A and B offer a live-streaming feature that allows videos to be broadcast live for several hours and subsequently made available on demand, similar to linear video streams and media libraries. Furthermore, the plaintiffs are of the opinion that an unauthorized act of making the content publicly available and processing it took place. The defendant is responsible for this pursuant to § 1(1) UrhDaG. By uploading Exhibit K7, the plaintiffs provided the defendant with the necessary information pursuant to § 7(1) of the UrhDaG and, in a letter dated October 1, 2024, once again drew the defendant’s attention to the infringements. The defendant is therefore obligated to block the unlawful publications. Since no such blocking took place, the defendant’s liability under § 1(2) of the UrhDaG has not been waived.

§

The defendant is also liable as an indirect infringer. It failed to fulfill its duties of scrutiny and conduct regarding the dissemination of infringing content and is therefore responsible for the infringement of the plaintiffs’ rights. The liability exemption under Article 6 of the DSA does not apply to the defendant. It is not a neutral host provider. The defendant had, at the latest following the plaintiffs’ cease-and-desist letter dated October 1, 2024 (Exhibit K6, p. 56 of the record), in combination with the photographs stored in the Brand Rights Protection Tool (Exhibit K7) and the reported content (Exhibit K18, p. 51 of the record), within the meaning of Article 16(3) of the DSA, of the relevant information indicating that a large number of pieces of content had been and were being published on its platforms that infringed the plaintiffs’ rights. On this basis, the defendant was capable of and obligated to remove identical and substantially similar content in the future even without further notice from the plaintiffs.

§

The defendant breached its duty to review by failing to delete the aforementioned content in a timely manner. This would be reasonable to expect of her. In this regard, it must be taken into account that the content in question not only infringes the plaintiffs’ rights in their lawsuits, but could also cause harm to platform users. Thus, with a view to preventing criminal offenses against Users, it would have been reasonable to expect the defendant to incur increased effort, especially since fraudulent activities also violate its own platform terms and conditions. This is also reasonable for the defendant because it plays an active role in the dissemination of the infringing content, enables advertisers to target their ads to specific user groups, and profits financially from the dissemination of the advertisements. Even if an automated review were not possible to the fullest extent, a supplementary manual review on a case-by-case basis would be reasonable.

§

Any remaining doubts would not preclude a duty to review. Plaintiff No. 1 is also entitled to a claim for injunctive relief under Sections 823(1), 824(1), and 1004(1) of the German Civil Code (BGB) by analogy, in conjunction with Art. 2(1) in conjunction with Art. 1(1) of the German Basic Law (GG) and Art. 19(3) of the GG, due to the infringement of its corporate personality rights. Untrue factual allegations (alleged financial recommendations by Plaintiff No. 1) are also being made. Plaintiff No. 1 bases the claim for injunctive relief pursued in Suit 1(a) primarily on copyright claims and, in the alternative, on claims arising from the right to corporate personality The publications also infringe Plaintiff No. 1’s trademark and trade name rights (Suits 1b) and 1c)). Plaintiff No. 1 is therefore also entitled to a claim for injunctive relief under para 14(5) and para 15(4) of the German Trademark Act (MarkenG).

§

There is a likelihood of confusion. The defendant is liable as an indirect infringer pursuant to Art. 6(1) of the German Data Protection Act (DSA). These were cases of manifest unlawfulness. The defendant should have deleted the content immediately. It did not sufficiently fulfill its duties to review and cooperate. This is all the more true given that the statements also violate the defendant’s own terms and conditions. Plaintiff No. 2) is of the opinion that the Frankfurt am Main Regional Court also has territorial jurisdiction over Plaintiff No. 2)’s claims under personality rights. The infringements of Plaintiff No. 2’s personality rights are also perceived within the judicial district of Frankfurt am Main and affect him there as well. Plaintiff No. 2 is entitled to a claim for injunctive relief against the defendant under § 1004(1) BGB by analogy, § 823(1), (2) BGB in conjunction with §§ 22, 23 KUG, Art. 6(1) and Art. 17(1) of the GDPR (Lawsuit 2a).

§

The publication and distribution of the images of Plaintiff No. 2 infringe upon his right to his own image. Plaintiff No. 2 had not consented to the commercial use of his photographs. Nor was consent dispensable under § 23 of the German Artistic Copyright Act (KUG). In particular, the photographs did not constitute portraits in the field of contemporary history. In addition, Plaintiff No. 2 may base his claims on the GDPR. The photographs and videos contain his personal data. There is no legal basis for the data processing. The defendant is a joint controller for the data processing with the profile owner or advertiser pursuant to Article 26 of the GDPR. The defendant influences the processing of personal data in the context of the distribution of advertisements to optimize its own products. It also exerts influence through its ranking mechanism to direct Users’ attention toward its services and thereby generate higher revenue.

§

Furthermore, it plays a role in determining the means of publication. It must be assumed that, in the ad auction process, the ads created by users are analyzed, thereby providing the defendant with knowledge of the specific content of the ads. This is supported by the fact that the defendant advertises that ad quality is also taken into account in the auction. The defendant thus plays an active role in the infringement. Contrary to the defendant’s argument, the terms of use grant not only technically necessary rights of use, but also, in particular, rights of modification and sublicensing The principles from the CJEU decision in Russmedia can be applied to the present case. Therefore, the host provider privilege under Art. 6 DSA does not apply. This also follows from the CJEU’s “Webgroup and Coyote System” decision (NJW 2026, 2311). In the alternative, the requirements for the liability exemption under Article 6 of the DSA are not met.

§

The plaintiffs had sufficiently informed the defendant of the infringements and the specific details in the cease-and-desist letter dated October 1, 2024 (Exhibit K6). The specification of characteristics with the same meaning is sufficient. A detailed review of the advertisements is not necessary, as the plaintiffs do not place advertisements on the defendant’s platforms, a fact of which the defendant must have been aware at the latest since the cease-and-desist letter dated October 1, 2024. In the vast majority of cases, the defendant did not delete the unlawful content immediately, but only after several days or several weeks. This constitutes a violation of its duties to review and take action. The defendant no longer acted “promptly” within the meaning of Art. 6(1)(2) of the DSA. The defendant is also liable for publications with the same meaning. Article 8 of the DSA does not preclude this, as the present case involves monitoring obligations in a “specific case” pursuant to Explanatory Note 30 of the DSA.

§

It is also technically possible for the defendant to take action against all infringements, including those with the same substance. According to its own statements, the defendant uses an AI-supported facial recognition program intended specifically to combat fakes and scams, a fact known to the court. Furthermore, the publications infringe upon Plaintiff No. 2’s right to his own name under § 12 BGB (Lawsuit 2b). This results in confusion regarding attribution among the intended audience. There is a risk of repetition in each instance. The measures taken by the defendant were insufficient. Plaintiff No. 2 asserts the claim for injunctive relief sought in Claim 2a) primarily as a claim under the right of personality and, in the alternative, as a claim under data protection law. Both plaintiffs are entitled to a right to information pursuant to § 242 BGB (Lawsuit 3). Plaintiff No. 1 has a claim against the defendant for damages—the amount of which cannot yet be quantified—pursuant to § 97(2) of the German Copyright Act (UrhG) and § 823(1) of the German Civil Code (BGB) in conjunction with Art. 2(1), 1(1) of the Basic Law (GG), and Sections 14(6) and 15(5) of the Trademark Act (MarkenG) (Claim 4a).

§

Plaintiff No. 2 has a claim against the defendant for damages, the amount of which cannot yet be quantified, under § 823(1), (2) of the Civil Code (BGB) in conjunction with Art. 2(1), 1(1) of the Basic Law (GG), and Sections 22 and 23 of the Artistic Copyright Act (KUG) (Claim 4a). The defendant is liable as a participant pursuant to Section 830 of the Civil Code (BGB). The defendant acted at least negligently. It is likely that damage has occurred. Users of the platform assumed they were on the plaintiffs’ websites and therefore followed the links or the recommendations made there. If users in these groups were given incorrect or fraudulent advice, this would reflect negatively on the plaintiffs despite their lack of liability. The plaintiffs’ reputation would be potentially and significantly jeopardized by such publications. There is a risk of reputational damage. This would result in fewer users utilizing the plaintiffs’ services, particularly if they had suffered financial losses at the hands of the fraudulent providers or assumed that the plaintiffs were not doing enough to combat fake accounts and fraudulent practices.

§

In addition, further legal costs are likely to be incurred. Plaintiff No. 2 also has a claim against the defendant for monetary compensation under § 823(1), (2) BGB in conjunction with Art. 2(1), 1(1) of the Basic Law (GG) in conjunction with §§ 22, 23 of the German Artistic Copyright Act (KUG) with respect to the publication of images (claim 4b). In any event, the defendant is liable as an indirect infringer, insofar as it participated in the act, and therefore, pursuant to § 830 BGB, also for its breach of duty by failing to conduct a review. The claim of both plaintiffs for reimbursement of pre-trial attorney’s fees (lawsuit 5) arises, for Plaintiff 1, from § 97a(3), first sentence, of the German Copyright Act (UrhG), and, in other respects, from §§ 677, 683, 670 of the German Civil Code (BGB) and § 823(1) BGB in conjunction with Art. 2(1) of the German Basic Law (GG), Art. 1(1) GG, and § 249(1) BGB.

§

Claims 2 through 5 could also be based on a violation of the defendant’s data protection obligations pursuant to the recent CJEU decision (BeckRS 2025, 32764 – Russmedia). The defendant is obligated, pursuant to § 1004 BGB in conjunction with Art. 2(1) in conjunction with Art. 1(1) GG, to cease data processing, and pursuant to Art. 82 GDPR, to pay damages. Plaintiff No. 2 has suffered a loss of control over his data and, as a result, damage to his personal and professional reputation. Plaintiff No. 1 clarified during the oral hearing that she bases claims 1b) and 1c) primarily on her right to a business identifier, secondarily on her word/figurative mark, and finally on her word mark. Plaintiff No. 2 clarified that he bases Claim 2a primarily on his right of personality and secondarily on claims under data protection law; Claim 2b is based primarily on claims under data protection law and secondarily on claims under the right to a name.

§

In their lawsuit, served no later than July 25, 2025, the plaintiffs ultimately request that the court rule as follows: The defendant is ordered, on pain of a fine of up to EUR 250,000.00 to be determined by the Court for each instance of violation, and, in the event that such fine cannot be collected, to serve a term of detention or a term of detention of up to six months, to be enforced against its legal representatives, to refrain, with respect to Plaintiff No. 1, from publishing and/or distributing third-party content on its platforms A and/or B without the consent of Plaintiff 1, and/or from having such actions performed by third parties, which contain images in which Plaintiff 2 is depicted and/or contain the word element of the word-and-design mark [Mark1] and/or the designation “F”—either verbatim or in a modified spelling— even though this content does not originate from Plaintiff 1 in the lawsuit, particularly when this occurs as shown in Exhibits K22, 24, 26, 28–31, and 33.

§

The defendant is ordered, on pain of a fine of up to EUR 250,000.00 to be determined by the Court for each instance of violation, and, in the event that such fine cannot be collected, to serve a term of detention or a term of detention of up to six months, which shall be enforced against its legal representatives, to refrain, with respect to Plaintiff No. 2, from publishing and/or distributing third-party content on its platforms A and/or B without the consent of Plaintiff No. 2, and/or from having such actions performed by third parties, which contain images of Plaintiff No. 2 and/or contain, either verbatim or in substance, the name “[Plaintiff No. 2],” even though such content does not originate from Plaintiff No. 2, particularly when this occurs as evident from Exhibits K22, 24, 26, 28–31, and 33. The defendant is ordered to provide the plaintiffs with information regarding the extent to which the content specified in paragraphs 1 and 2, as well as content with the same meaning, was distributed on platforms A and B, accessed, and/or made publicly available, by submitting a structured list organized by URL, the respective total number of views, and a breakdown of the defendant’s revenue generated thereby.

§

It is hereby determined that the defendant is obligated to compensate the plaintiffs for the damages they have incurred and/or will incur in the future as a result of the dissemination of the infringing acts set forth in paragraphs 1 and 2 and those of similar nature, including those resulting from redistribution by third parties; to pay Plaintiff No. 2 an amount, the specific amount of which is left to the discretion of the Court, to compensate him for the non-pecuniary damages he suffered as a result of the dissemination of the infringing acts set forth in paragraph 2 and acts of a similar nature; The defendant is ordered to pay the plaintiffs EUR 3,568.81 plus interest at a rate of 5 percentage points above the applicable base rate from the date the lawsuit was filed. The defendant moves to dismiss the lawsuit. The defendant asserts that it has no influence over the content disseminated on its platforms but limits itself to providing technical infrastructure as well as technical and automated tools.

§

The user bears responsibility for the order, content, targeting decisions, and ad placement (Exhibit B16). Even with the Ad Creative Generative AI tool for optimizing advertisements, the defendant does not create any new content. Furthermore, this tool is not available for financial advertising. Operating a ranking system (“recommended content”) also does not result in the defendant adopting any posts as its own, but is likewise based on an automated process. Furthermore, the plaintiffs have not demonstrated that the content at issue in this lawsuit constituted “recommended content.” The defendant promptly reviewed and removed a large number of advertisements and profiles containing fraudulent content related to the lawsuits. It is not possible to develop a system capable of detecting every single infringement. There was no intentional delay in erasure for the purpose of generating revenue.

§

Furthermore, the content in question here does not involve advertising from which the defendant derives revenue; rather, the disputed content consists solely of user-generated content. The time taken to remove the undisputed reports ranged from 0 to 20 days. This time was necessary for the required case-by-case reviews. It is technically impossible for the defendant to detect “substantially identical” content. The defendant is of the opinion that the claims set forth in paragraphs 1 through 4 are inadmissible due to a lack of sufficient specificity within the meaning of Section 253(2)(2) of the German Code of Civil Procedure (ZPO). The phrasing “without the consent of Plaintiff No. 1” requires a case-by-case review. The phrasing “recordings in which Plaintiff No. 2 is depicted” does not constitute a reference to a specific work with regard to copyright claims. The word “in particular” in the claim results in an indefinite, abstract part of the claim.

§

Suits 2) are likewise indefinite due to the phrases “in particular,” “without consent,” as well as “literal or equivalent use of the name [Plaintiff No. 2]” and “portraits of Plaintiff No. 2.” The same applies to Suits 3 and 4. The lawsuit is also without merit. With regard to the alleged copyright infringements, Plaintiff No. 1 has failed to substantiate her standing to file a lawsuit. She also fails to specify for which content she claims copyright protection and whether she has been granted exclusive rights of use for such content {524 et seq.}. Claims under the UrhDaG are precluded because the defendant is not a service provider within the meaning of § 2 UrhDaG. Even if it were, this would not impose an obligation to remove, without restriction, all identical or substantively identical content. Nor is the defendant liable as an indirect infringer under the principles of host provider liability pursuant to Art. 6 of the German Data Services Act (DSA).

§

The defendant has not violated any duties to monitor or take action. The defendant is a neutral host provider that neither provides nor is responsible for any of the content on its platforms itself, but merely makes the technical infrastructure available. The defendant fulfills all of its obligations to combat unlawful fake accounts and fake ads. It not only removes infringing content when it becomes aware of it but has also established comprehensive measures—going beyond its legal obligations—to prevent infringements. Any remaining issues can only be resolved through cooperation. Sufficient notification pursuant to Art. 16(2) of the DSA can only be presumed under strict conditions. Neither the reports submitted via the Brands Right Protection Tool nor the cease-and-desist letter dated October 1, 2024, contained sufficient details regarding specific content. In particular, specific details regarding storage locations—such as URLs—were missing.

appliesArt. 16(2)
§

The protected works and the rights to them were not identified. There was also no declaration regarding the completeness and accuracy of the information provided. Even if a duty to act were assumed, the defendant would have sufficiently fulfilled it by removing the relevant content. The plaintiffs demanded an excessive manual review, which would be unreasonable to expect of the defendant as a neutral host provider. Pursuant to Article 8 of the DSA, there is no general monitoring obligation. Nor does the host provider have a general duty to ensure that new (similar or equivalent) content is not uploaded. The use of a name or a company identifier is not, in and of itself, sufficient to indicate an unlawful fake profile. Since there are several billion user accounts, it is not possible to unambiguously assign a name to a specific person. If additional characteristics, such as images, are present, it must be assessed on a case-by-case basis whether, after an overall evaluation, there is an indication of a fake account.

§

Accounts that refer to the plaintiffs in lawsuits and use their names or company logos and publicly available images are not unlawful but are permissible as long as the account does not give the impression of being the plaintiffs’ own account. The dissemination of the plaintiffs’ name, likeness, or company logo is not per se impermissible. An unlawful, imitative “fake account” exists only if a user account or a website uses the plaintiff’s name and corresponding images to give the impression that the plaintiffs operate the user account. For example, the account or advertisement described in the brief dated February 16, 2026, p. 14, p. 516 of the case file, is not impermissible. The argument regarding infringement of the trademark of Plaintiff No. 1 is unconvincing. The trademarks of Plaintiff 1 are ineligible for protection due to their descriptive nature. At the very least, the scope of protection is so narrow that even the slightest deviations fall outside its scope, which would also have to be examined on a case-by-case basis.

§

Therefore, an automated procedure is not suitable for the proactive detection of large-scale abuses. In the case of an infringement of the general right of personality, a legal violation cannot be determined automatically but requires a difficult balancing of interests on a case-by-case basis. Consequently, the host provider must be granted a reasonable period of time for review and consideration. According to the case law of the CJEU, even in the event of a proper notification, “complete” removal of additional content is not required. This would force hosting providers to block content in cases of doubt in order to prevent potential liability, thereby also entailing the risk of blocking permissible content. An excessive obligation to remove content is incompatible with the protection of fundamental rights to communication. Cooperation between the host provider and the rights holder is required.

§

The defendant fulfilled this obligation by removing the content. Even if obligations to review and take action were assumed, there is no risk of recurrence. The defendant responded appropriately in each instance. The plaintiffs’ cease-and-desist letter dated October 1, 2024 (Exhibit K6) was not sufficient to provide adequate notice. It contained screenshots that were, in part, low-resolution; no specific storage location or URL was provided; no specific images were identified, and no proof of authorization was attached; furthermore, the word-and-design mark did not cover the relevant services. The breakdown of characteristics listed in the letter is unusable. The use of a specific photograph, an account name, or a word/figurative mark of Plaintiff No. 1 is not unlawful. The overview in Exhibit K18 is unsuitable. The reported content is not apparent there. The plaintiffs’ reports submitted via the Brand Rights Protection Tool were also, in some cases, very inaccurate or incomplete.

§

No use of the “F” mark in a trademark sense has been demonstrated, neither for the fake profiles nor for the disputed advertisement. There is no similarity in the services provided. Plaintiff No. 1) relies, with respect to the word/figurative mark DE ..., on the registration for services in Classes 35 and 41, namely “advertising in electronic media and specifically on the Internet,” “advertising and marketing services provided via social media,” and the “provision of audio and visual media via communication services.” However, the present case does not concern such services (provided by Users), but rather “advertising for financial products or (fraudulent) investment products” (by Users). Furthermore, Plaintiff 1’s trademark is not eligible for protection for such services. With regard to the word mark “F,” Plaintiff 1) relies on the registration for the services “advertising, marketing, and sales promotion” (Nice Class 35), “computer-assisted provision of information in the field of finance,” “online information services regarding finance provided from a computer database or the Internet” (Nice Class 36) “education, training, entertainment, and sports activities,” as well as “video production” (Nice Class 41).

§

These are not at issue in the present case. The trademark is not eligible for protection with respect to the disputed services at issue because it is generic and purely descriptive in the field of financial services. The defendant is also not liable as an infringer. Plaintiff No. 2 has no claim for injunctive relief based on a violation of the right to one’s own image. The defendant is not liable as a trespasser. The image of Plaintiff No. 2 is not unlawful in every context. This requires a case-by-case assessment. There is also no violation of data protection law. A claim under Article 17 of the GDPR is precluded; for Plaintiff No. 1) simply because she is not a natural person. For Plaintiff No. 2), the claim is precluded because all content at issue has been removed. Furthermore, Plaintiff No. 2 had not actively exercised his rights under Article 17 of the GDPR. Such a request under Article 17 of the GDPR would also be unfounded, as the request must be directed to the responsible controller—that is, the third-party users.

§

Furthermore, a claim for injunctive relief cannot be based on Article 17 of the GDPR. The CJEU’s Russmedia decision is not applicable to the present case. Nor can joint controllers be assumed. Furthermore, personality rights do not take precedence over the fundamental rights to freedom of expression and communication. As a social media platform, the defendant has no commercial interest of its own in exploiting the content of user posts. Nor does the ranking mechanism constitute any influence. Nor is the defendant liable under the principles of host provider liability pursuant to Article 6 of the DSA. It is a neutral host provider and does not adopt the content as its own. This neutrality pertains to the content itself and not to commercialization. Furthermore, the assessment of ad quality is based on automated pattern recognition and not on an individual review or active participation in shaping the content.

§

Even under Explanatory Notes 22, 68–70 of the DSA, it cannot be assumed that the defendant has knowledge of the content based on automated activities. Plaintiff No. 2 also has no claim for injunctive relief based on a violation of his right to a name. Whether unauthorized use has occurred must be determined on a case-by-case basis. In this respect, the defendant is not liable as a tortfeasor. There is also no right to information. At most, a claim against the defendant as a third party might exist under Sections 101(2) of the German Copyright Act (UrhG) and Section 19(2) of the German Trademark Act (MarkenG). However, the requested information is not covered by these provisions. A claim under Section 242 of the German Civil Code (BGB) is also ruled out. The obligation to provide information regarding content of a similar nature would constitute an unreasonable burden, as it would entail a disproportionately high effort on the part of the defendant.

§

There is no claim for a declaration of liability for damages; in particular, in the context of indirect liability for interference, such a claim can only be considered in exceptional cases. Nor is the defendant liable as an accomplice, as there is a lack of dual intent on the part of the accomplice. There is no likelihood that damage will occur. A claim under Article 82 of the GDPR is ruled out because it can be directed exclusively against the controller. There is a lack of evidence of a specific breach of duty. In particular, Exhibit K18 does not meet the requirements for demonstrating a breach of duty. Plaintiff No. 2 also has no claim for monetary compensation. Such a claim would require a culpable infringement of personal rights. Liability as a third party causing interference is not sufficient. The third party causing interference is liable only for injunctive relief, but not for damages.

§

In this regard, it must also be taken into account that, according to their own statements, the plaintiffs have been aware for a year that such content has been published. In any case, a serious infringement of personality rights must be rejected. There is no liability as an accomplice, and liability for failure to act is out of the question. The Chamber took evidence by examining the witness S. With regard to the outcome of the taking of evidence, reference is made to the transcript of the oral hearing dated June 3, 2026. For further details, reference is also made to the pleadings exchanged between the parties, together with their attachments, as well as the other contents of the case file. Reasons for the Decision The lawsuit is largely admissible and partially well-founded. A. The lawsuit is largely admissible. I. The Frankfurt am Main Regional Court has international jurisdiction based on the uncontested admission pursuant to Art. 26 of the Brussels Ia Regulation.

§

The Frankfurt am Main Regional Court also has territorial jurisdiction with respect to the plaintiff’s (2) claims under personality rights pursuant to § 32 of the German Code of Civil Procedure (ZPO) and Art. 7(2) of the Brussels Ia Regulation, because the plaintiffs have convincingly asserted an infringement via the Internet. II. The claims are sufficiently specific. Pursuant to § 253(2)(2) of the German Code of Civil Procedure (ZPO), a claim—and, pursuant to § 313(1)(4) ZPO, a judgment based thereon—must not be formulated in such an unclear manner that the subject matter of the dispute and the scope of the Court’s authority to review and make decisions are not clearly defined, that the defendant is therefore unable to mount a comprehensive defense, and that, as a result, it is left to the enforcement authority to make the decision on what the defendant is prohibited or required to do (BGH, NJW 2024, 3152, para. 8 – Payout Fee).

§

However, the use of terms requiring interpretation in the statement of claim to describe the act to be prohibited is acceptable—or even appropriate or necessary in the interest of a proper judgement—if there is no doubt as to the meaning of the terms used, so that the scope of the claim and the judgement is clearly established (see BGH, GRUR 2011, 539, para. 13 – Legal Advice by Food Chemists, with further references). It is acceptable, or appropriate—or even necessary—in the interest of a proper judgement if there is no doubt as to the meaning of the terms used and objective criteria for delimitation exist, such that the scope of the claim and the judgement is clearly established (see BGH, GRUR 2011, 539, para. 13—Legal advice provided by food chemists, with further references). The same shall apply if the term requiring interpretation can be accurately understood by the relevant public from a relevant objective perspective, notwithstanding its vagueness (Teplitzky/Schwippert, Competition Law Claims and Proceedings, 13th ed., Chap. 51, para. 8c).

§

Furthermore, a claim formulation requiring interpretation may be acceptable if this is necessary to ensure effective legal protection (BGH, GRUR 2019, 813, para. 23 – Cordoba II, with further references; BGH, Decision of Nov. 18, 2021 – I ZR 205/20, GRUR-RS 2021, 56776 – Service Fee; Teplitzky/Schwippert, op. cit., chap. 51, para. 8a, with further references), although this may in turn be ruled out if the plaintiff could have filed a motion specific to the particular form of infringement (see BGH, GRUR 2011, 539, para. 13 – Legal advice provided by food chemists; BGH, Decision of Nov. 18, 2021 – I ZR 205/20, GRUR-RS 2021, 56776 [juris para. 16 et seq.] – flat-rate service fee). The content of claims must be determined by interpretation. It is recognized that claims for injunctive relief that merely repeat the wording of a statute are, as a general rule, to be regarded as too vague and thus inadmissible.

§

An exception may apply if either the statutory prohibition itself is already formulated with sufficient clarity and specificity, or the scope of application of a legal provision has been clarified by established interpretation, or if the plaintiff makes it sufficiently clear that he is not seeking an injunction to the full extent of the statutory wording, but rather bases his claim for injunctive relief on the specific act of infringement. In such cases, however, a finding that the claim is sufficiently specific generally requires that there be no dispute between the parties as to whether the conduct at issue satisfies the elements of the offense in question. The inclusion of the statutory elements of the prohibited act in the wording of the claim is also not prejudicial, if what is sought by the lawsuit—which is not sufficiently clear in and of itself—can be unambiguously determined in fact through interpretation based on the plaintiff’s statement of facts, and the relevant factual circumstances are not in dispute between the parties, but rather their dispute is limited to the legal characterization of the contested conduct (BGH, GRUR 2019, 813, para. 23 – Cordoba II).

§

The use of terms that require interpretation to describe the act to be prohibited in the statement of claim may also preclude specificity. However, similar to the repetition of the statutory language in the claim, this is acceptable or, in the interest of an appropriate judgment, advisable or even necessary if there is no doubt as to the meaning of the terms used and objective criteria for delineation are available, so that the scope of the claim and the judgement is clearly established (see BGH, GRUR 2011, 539, para. 13—Legal Advice by Food Chemists, with further references). The same shall apply if the term requiring interpretation can be accurately grasped by the relevant public from a relevant objective perspective, notwithstanding its vagueness (Teplitzky/Schwippert, op. cit., Chap. 51, para. 8c). In this respect as well, basing the complaint on the specific form of infringement can make it sufficiently clear which conduct is being challenged in any event (see BGH, GRUR 2010, 749, para. 21 – Reminder advertising on the Internet; BGH, GRUR 2011, 539, para. 13 – Legal advice by food chemists, with further references).

§

Furthermore, a claim that requires interpretation may be acceptable if this is necessary to ensure effective legal protection (BGH, GRUR 2019, 813, para. 23 – Cordoba II, with further references; Federal Court of Justice (BGH), Decision of Nov. 18, 2021 – I ZR 205/20, GRUR-RS 2021, 56776 [juris para. 10] – Service fee; Teplitzky/Schwippert, loc. cit.O., chap. 51, para. 8a, with further references), which, however, may in turn be ruled out if the plaintiff could have filed a motion specific to the particular form of infringement (see Federal Court of Justice, GRUR 2011, 539 [juris para. 13] — Legal advice from a food chemist; Federal Court of Justice (BGH), Decision of Nov. 18, 2021 – I ZR 205/20, GRUR-RS 2021, 56776, para. 10 – flat-rate service fee). The motions most recently filed during the oral hearing satisfy these requirements. 1. Insofar as the defendant objects to the wording in Motions 1 and 2 “without the consent of Plaintiff 1,” it is sufficiently clear from the interpretation of the motion that the use is to be prohibited only if it occurs without the consent of the plaintiffs.

§

This clearly delineates for both parties the scope of the injunction. 2. The plaintiffs have each dropped the wording “advertising content” (lawsuit claims 1 and 2), which the defendant rightly challenged. The same applies to the wording “financial and/or economic topics,” which may not be sufficiently specific 3. In principle, the defendants are correct in challenging the wording in Suit 1.a, “images in which Plaintiff No. 2 is depicted.” This wording is vague in its abstract form, as it is not clear which images are being referred to. In its abstract form, this lawsuit was therefore to be dismissed. However, the lawsuit becomes definable through the specific reference to the specific advertisements challenged in the exhibits, in which images of Plaintiff No. 2) are visible. A portion of an injunction request introduced by the word “in particular” serves, on the one hand, to clarify the primarily sought abstract prohibition by illustrating, through examples, what is meant by the form specified in the abstract request.

§

On the other hand, the plaintiff can thereby make it clear that the subject matter of his lawsuit is not merely a comprehensive, abstractly formulated prohibition, but that he—if he does not succeed in this regard —seeks, in any case, the cessation of the specifically contested conduct; however, this “in particular” addition is also subject to the general rules and must therefore comply with the requirement of specificity (BGH, GRUR 2020, 405, para. 15 – Öko-Test II). In this lawsuit, the plaintiffs made it clear at the oral hearing that they wish the portion introduced by “in particular” to be understood as a “quasi-alternative claim.” By referring to the specific forms of infringement and taking into account the statement of the lawsuit, including Exhibit K7, it is sufficiently clear what constitutes images of Plaintiff No. 2). This specification is sufficiently specific. The same applies, incidentally, with regard to the portion of Claim 1 introduced by “in particular.”

§

In this respect as well, the claim is not sufficiently specific in its abstract part and must be dismissed to that extent; however, it becomes sufficiently specific through the reference to the specific forms of infringement. 4. Insofar as the defendant challenged the wording “in whole or in part” in Suit 1.b, Plaintiff 1) has withdrawn this portion and replaced it with “the word element of the” word-and-design mark [...]. This sufficiently specifies what is to be prohibited. 5. Suitsuit 1.c is also sufficiently specific. The plaintiffs have amended the wording “literally or in substance” to “literally or in a modified spelling.” In this regard, reference must be made to the lawsuit statement, and the plaintiffs made it clear at the oral hearing that, for example, the addition of numbers (“F499,” etc.) or special characters (“[Part1]_[Part2]”) should be covered by the motion. 6. Claim 2b) is also open to interpretation in this regard.

§

The plaintiffs made it clear at the oral hearing that, for example, the addition of numbers or special characters (e.g., “[First Name]_[Last Name]”) is intended to be covered by the lawsuit. The same applies to lawsuits 3 and 4. III. Insofar as the defendant has argued that the lawsuits are inadmissible due to an alternative joinder of lawsuits, the plaintiffs have specified, for each of their lawsuits, an order for examining the corresponding legal bases (BGH, GRUR 2011, 521 – TÜV I; BGH, GRUR 2011, 1043 – TÜV II). Therefore, it was no longer relevant in this respect whether this would have been necessary in the individual case (see, on the issue of the subject matter of the dispute, the recent BGH, GRUR 2025, 1935, para. 19 et seq. – Price Change Regulation II, with further references). IV. Due to the reformulation of Claim 1.b), it is now almost identical to Claim 1.c). However, with the wording “verbatim or in a modified form,” Claim 1.c) goes slightly beyond Claim 1.b).

§

Since the legal remedy sought in Claim 1.b) is now already included in Claim 1.c), Claim 1.b) is inadmissible for lack of a legal interest in the action. V. There is an interest in a declaratory judgment pursuant to § 256 ZPO. B. The lawsuit is partially well-founded. I. Plaintiff No. 1 has no claim for injunctive relief against the defendant under § 97(1) UrhG, nor in conjunction with §§ 1(1), 7(1) UrhDaG, for copyright infringement As for the issues disputed between the parties—namely, whether the defendant, with its Services A and SA, is to be regarded as a service provider within the meaning of § 2(1) of the UrhDaG, and whether the requirements for qualified blocking under § 7(1) of the UrhDaG are met— were ultimately irrelevant. This is because Plaintiff No. 1 lacks standing to bring copyright claims in the first place. In this regard, Plaintiff No. 1 asserted that the photographs at issue here were produced by employees of Plaintiff No. 1 and that they had granted her exclusive rights of use.

§

Plaintiff No. 1, who bore the burden of presentation and proof in this regard, was unable to prove this. The court heard the witness S on this matter. He provided information regarding who created these images and videos, referring to Exhibit K7 and the exhibits cited in Claim 1). In doing so, he stated that a large number of the images had been created by employees of the plaintiff in the lawsuit, that some of the images had been taken by a photographer named D., and that one of the images had been provided by ... Publishing. In this regard, the Chamber concurs with the witness, who provided consistent and candid testimony, responded openly to objections, and consistently disclosed any uncertainties. However, regarding the question of granting rights of use to Plaintiff No. 1), the witness merely stated that he did not know what was in the employees’ contracts, but that there was a clear understanding that the images and videos were created for use by Plaintiff No. 1).

§

In this regard as well, the Chamber concurs with the witness. However, this does not prove that Plaintiff No. 1 received exclusive rights of use to the respective images and videos. In the absence of an explicit provision regarding the scope of the rights of use contractually granted by the author, one must proceed from the purpose of the contract—which the parties unanimously pursue based on the entire content of the contract— and the needs of the contracting parties presumed on that basis, and one must ask whether—and, if so, to what extent—the granting of rights of use is necessary to achieve the purpose of the contract. This is because, in accordance with the “purpose of transfer” principle set forth in Section 31(5) of the German Copyright Act (UrhG), the author grants rights of use, in cases of doubt, only to the extent absolutely required by the purpose of the contract. This rule of interpretation reflects the fact that copyright powers tend to remain with the author to the greatest extent possible, so that the author may share appropriately in the proceeds of his or her work.

§

This means that, in general, only those rights of use that are indispensable for achieving the purpose of the contract are impliedly granted. Conversely, the grant of rights of use extending beyond the purpose of the contract can only be assumed if the parties’ intent—even if based solely on the accompanying circumstances and the conclusive conduct of the parties involved—has been unequivocally expressed (BGH, GRUR 2013, 1213, para. 32 – SUMO; Dreier/Schulze, UrhG, 8th ed., § 31, para. 110, with further references). For the purposes described by the witness—namely, use on social media platforms—the granting of simple rights of use is necessary but also sufficient. Although granting rights that exclude employees from personal use might seem obvious, this cannot be assumed here due to the rule of doubt in § 31(5) UrhG. This also applies in light of the interpretation of § 43 of the German Copyright Act (UrhG).

§

According to that provision, the results of the employee’s work generally belong to the employer to the extent that the employee created them in fulfillment of his or her obligations under an employment relationship. However, since copyrights do not automatically vest in the employer or public authority, the employed author is obligated to grant these copyrights. The grant itself, which usually concerns an exclusive right of use (OLG Karlsruhe, GRUR-RR 2013, 423 – Zwölffamilienhaus), additionally requires an express declaration (Dreier/Schulze, UrhG, 8th ed. 2025, § 43, para. 18, with further references). The obligation to grant rights of use may either be expressly stipulated or arise tacitly from the employment or service contract (Dreier/Schulze, UrhG, 8th ed. 2025, § 43, note 19, with further references). The scope of the grant of rights—in terms of content, territory, and duration—is determined by the content of the contract in cases of an express contractual provision.

§

In this respect, too, the provision of § 31(5) UrhG applies, as does—particularly in the case of an implied grant of rights—the general rule regarding the purpose of the transfer (BGH, GRUR 2011, 59, para. 11 – Noise Barrier; Dreier/Schulze, UrhG, 8th ed. 2025, § 43, para. 20). In this case, the witness S stated that he did not know what was contained in the contracts. Plaintiff No. 1 has not provided any further details in this regard. It therefore remains unclear whether and to what extent a grant of rights is regulated in the contracts, so that one must rely solely on the “clear agreement” described by witness S as cited above. This also applies to those images regarding which Witness S stated that they originated from Photographer D. In this regard, Plaintiff No. 1 did submit an invoice at the oral hearing and argued that this constituted a grant of exclusive rights of use. However, the Chamber does not agree with this.

§

The invoice does indeed explicitly list the “transfer of rights of use” alongside other services. However, even in this regard, the doctrine of the purpose of the transfer must be applied to determine the purpose of the grant, and in case of doubt, the narrowest possible scope must be assumed. The fact that the invoice does not specifically indicate that exclusive rights of use were to be granted to the exclusion of the photographer—but rather leaves this open—works to the detriment of Plaintiff No. 1 in this lawsuit. Furthermore, the defendant contested the plaintiffs’ arguments presented during the oral hearing, so Plaintiff 1 also failed to provide evidence as to which photographs are the subject of the submitted invoice. Since the plaintiff has not proven that it is the holder of exclusive rights of use to the images at issue here—but rather, it must be assumed in each case that only a simple grant of rights of use was intended—Plaintiff No. 1 cannot take action against the defendant based on the derived rights.

§

Incidentally, this also applies to the image or video that Witness S stated was created by Plaintiff No. 2 himself in connection with the lawsuit. For even in this regard, it would have been incumbent upon Plaintiff No. 1 to argue and prove that Plaintiff No. 2 had granted her exclusive rights of use in this respect. This has not been established here. II. Plaintiff No. 1 is, however, entitled to the injunctive relief sought in Claim 1a) for infringement of her corporate personality right pursuant to § 823(1) of the German Civil Code (BGB), § 1004(1), second sentence, of the German Civil Code (BGB) by analogy in conjunction with Art. 1(2) in conjunction with Art. 19(3) of the German Basic Law (GG). 1. As a manifestation of the general right of personality, the corporate right of personality protects the social right to recognition of corporations as economic enterprises, as guaranteed by para 2 of Article 2 of the Basic Law (GG).

§

Whether an infringement of the right to corporate personality is unlawful must—due to its nature as a framework right—be determined by weighing the conflicting interests protected by fundamental rights, taking into account the specific circumstances of the individual case as well as the fundamental rights at stake. An infringement of the right of personality is unlawful only if the interest of the affected enterprise that warrants protection outweighs the legitimate interests of the other party (BGH, GRUR 2021, 1207, para. 53 – “Vorsicht Falle,” with further references; see BGH, NJW 2020, 1587, para. 43, with further references). Highlighting the name of a personally liable partner in an enterprise may infringe upon that partner’s personality rights, which, in the case of enterprises that use their name or parts of their business name for advertising purposes, the right to determine for themselves the nature and scope of the use of the name or part of the company name by others.

§

This right is part of the right to intellectual and economic self-determination and to the free development of personality, which is vested solely in the bearer of the name (see BGH, NJW 1981, 2402 et seq.). In determining whether and in what manner a distinctive feature of personality—such as one’s name—is used by third parties for advertising purposes, thereby infringing upon the economic aspect of the right of personality, it depends on whether a not insignificant portion of the target audience perceives the use as commercial. The same applies to the assessment of whether a personality trait is being used at all. In this regard, too, it depends on whether a significant portion of the audience targeted by the advertisement perceives the contested use as the use of a personality trait (BGH, NJW-RR 2024, 972, para. 17 – Aircraft Registration Marks, with further references). In principle, the right to one’s image may also be held by a legal entity, provided that the images in question are covered by constitutional protection of personality rights (left open by the Federal Constitutional Court [BVerfG], NJW 2005, 883).

§

However, a legal entity’s right to one’s own image could under no circumstances extend further than the corresponding right of a natural person; rather, the protection would be considered weaker, since, unlike a natural person, a legal entity cannot also invoke the protection of human dignity within the meaning of Art. 1, para. 1, of the Basic Law, which is included in the general right to privacy. Protection under fundamental rights would, in principle, require a depiction of the person themselves; the depiction of business premises or work processes is in any case not covered by this protection (see Federal Constitutional Court, NJW 2005, 883 et seq.). Against this background, the present case involves a violation of the corporate personality right of Plaintiff No. 1 through the unauthorized publication and dissemination of content containing images of Plaintiff No. 2 and the “F” logo in this or a modified form, as shown in Exhibits K22, K24, K28, K29, and K33.

§

In Annexes K30 and K31, however, no clear connection to Plaintiff 1) can be identified; therefore, there is no infringement of her corporate personality rights in these cases. Plaintiff No. 1 has undisputedly argued that Plaintiff No. 2 is the defining face of Plaintiff No. 1, in part due to his participation in numerous videos and all social media posts, as well as the podcast “...,” which now has at least 149 episodes. He is regularly depicted in the photographs and image collages used by Plaintiff 1) in the lawsuit and is interviewed by national news and industry portals. The unauthorized use of Plaintiff No. 2’s likeness in connection with Plaintiff No. 1’s “F” trademark for advertising purposes and promotional content constitutes an infringement of Plaintiff No. 1’s corporate personality rights, to determine for itself how it wishes to be presented in advertising. The profiles and posts give the false impression that they originate from Plaintiff No. 1.

§

Furthermore, the infringement is not justified. The interests of Plaintiff 1) outweigh the interests of the creators of the fake profiles and fake posts. It is undisputed that the creators of the fake profiles and fake posts use them for fraudulent activities. The users in question have no interest worthy of protection in this type of economic activity. 2. The defendant is also directly liable for this infringement of corporate personality. It cannot invoke the limitation of liability under Art. 6 of the DSA. This is because the defendant exercises “control” over the content at issue here within the meaning of Article 14 of Directive 2000/31/EC (E-Commerce Directive) and Article 6 of the DSA, which precludes the application of the liability exemption. To determine whether the operator of a service may be exempted from liability for the stored content under Article 14(1) of the E-Commerce Directive, it must be examined whether the operator’s role is neutral, that is, whether its conduct is purely technical, automatic, and passive—meaning it has no knowledge of or control over the content it stores—or whether, on the contrary, the provider plays an active role that enables it to acquire knowledge of or control over that content.

§

In light of Recital 42 of the E-Commerce Directive, these two conditions of knowledge and control are to be understood as alternative and mutually independent requirements. Consequently, the operator of an information society service who controls the stored information is excluded from the privilege under Article 14(1) of the E-Commerce Directive, even if he does not become aware of this information due to the automation of its processing (CJEU, NJW 2026, 2311, para. 109 et seq. – Webgroup and Coyote, with further references). Such control over the stored information may be exercised, among other things, by means of an algorithm. As long as the operator has predetermined, by means of this algorithm, the conditions for the dissemination or non-dissemination of such information, it is irrelevant that the operator does not itself take any additional actions that promote, modify, or delete the dissemination of stored information (see CJEU, NJW 2026, 2311, para. 111 – Webgroup and Coyote, with further references).

§

In this context, control is to be presumed in particular if the algorithm used goes beyond mere categorization and indexing of the information and, in the interest of the operator or its service, determines under what conditions, in what manner, and in what order this information is disseminated or not. If the operator exercises this Art of control, the service it offers cannot be classified as an “information society service consisting in the storage of information provided by a user,” within the meaning of Art. 14(1) of the E-Commerce Directive (see CJEU, NJW 2026, 2311, para. 112 – Webgroup and Coyote, with further references). This decision is applicable to Art. 6 of the DSA (see Mantz, NJW 2026, 2535, para. 20), which stands to reason, since Article 14(1) of the E-Commerce Directive is the predecessor provision to Article 6 of the DSA (see OLG Frankfurt a.M., MMR 2025, 898, 901). In application of these principles, the defendant exercises control over the content at issue.

§

The defendant itself argues that, in the case of advertisements within the framework of an automated auction process, it makes the decision regarding the ranking and timing of ads that have been created and approved by the advertiser, and that a so-called “quality score” is taken into account as a third auction component, which, by means of automated pattern recognition, identifies, for example, the amount of text in the ad image, sensationalist language, or engagement baiting. This is a purely formal assessment designed to enhance the user experience. No qualitative assessment of reliability or factual accuracy is performed. The decision as to which Users an advertisement is shown to is made by the advertiser through the selection of the respective target audience. Simply by conducting such an “auction” based on criteria established by the defendant, the defendant exercises a control and decision-making function over the advertisements that is superior to that of the individual advertiser.

§

This is because the “ad slots” are allocated according to the procedure it has established; it is therefore the defendant that determines under which conditions the content is or is not distributed. The fact that the advertiser has previously selected specific target audiences for which the ad is to appear does not alter the fact that the defendant ultimately makes the decision—albeit automatically—which specific Users will see the ad. The same applies to the bids placed by the advertiser during the auction. While the advertiser does thereby determine whether his content is displayed or not, However, when submitting a bid, the advertiser cannot be certain whether their bid will be accepted or not. This depends not only on the bids of other advertisers, but also—and in particular—on the auction algorithm set up by the defendant. With regard to user-generated (advertising) content, it is undisputed and also known to the court that the defendant uses algorithms to control the display of user content in other users’ feeds.

§

This was also discussed during the oral hearing. It is true that the user who created the content posted and uploaded it themselves and thus made the decision to make it available to all users or a defined group of users on the respective social platform. However, the defendant makes its decision—through the use of its ranking algorithm and in accordance with rules it has established (even if these are automated and, where applicable, based on user interests)—in which user feeds and at what times the respective content will appear. It therefore also determines the conditions for the dissemination and ranking of the content in this respect. In both cases, it thus exercises control over the posted information. Contrary to the defendant’s view, any positive knowledge of the content is no longer relevant. The defendant also acts in its own interest; in the case of optimized advertisements, it generates revenue; in the context of algorithm-driven display of user content, the goal—as is well known to the court—is to achieve higher interaction rates, which in turn has a positive effect on reach and thus on advertising effectiveness, to the defendant’s advantage.

§

The defendant can therefore no longer claim that it is merely a neutral host provider and is liable only upon sufficient notification of a violation. Insofar as the defendant argues that the CJEU’s Webgroup and Coyote decision does not apply to the defendant’s service, the Chamber does not agree. In this regard, it should first be noted that the Webgroup and Coyote decision fundamentally fits into the liability framework developed by the CJEU and represents a further development thereof. In the past, the CJEU has consistently based its rulings on the liability of service providers under the E-Commerce Directive on whether the service provider is neutral or plays an active role. A key element in making this distinction has always been the service provider’s control over User content, as is particularly evident in the distinction between the access provider under Article 12 of the E-Commerce Directive and the host provider under Article 14 of the E-Commerce Directive.

§

The CJEU—as it itself notes in Webgroup and Coyote (see CJEU, NJW 2026, 2311, para. 109 – Webgroup and Coyote) – already emphasized the element of control in the YouTube and Cyando decision (CJEU NJW 2021, 2571, para. 106 – YouTube and Cyando) that the element of control is central to the liability exemption under Article 14 of the E-Commerce Directive. In this regard, the CJEU’s decision does not represent a break with the previous development of liability, e.g., in the case law of the Federal Court of Justice (BGH). This is because the liability of service providers has, in the past, been developed primarily with regard to service providers who—unlike the defendant in this case—did not algorithmically intervene in the display of content and, in that sense, did not exercise control, e.g., file-hosting services (see BGH, GRUR 2013, 1030 – File-Hosting-Dienst; BGH, GRUR 2013, 370 – Alone in the Dark), on auction platforms (BGH, GRUR 2004, 860 – Internet Auction I), or—as in the case of search engines (see CJEU, GRUR 2010, 445 – Google)— —have primarily indexed and categorized data to facilitate discoverability (see CJEU, NJW 2026, 2311, para. 112 – Webgroup and Coyote).

§

Since then, the business models of service providers under review have fundamentally changed; they now rely more heavily on advertising and interaction and use algorithms to strongly retain users on their own platforms. The use of such algorithms thus serves, in particular, the service provider’s own economic interests (see CJEU, NJW 2026, 2311, para. 112 – Webgroup and Coyote). Nor does the CJEU’s interpretation generally exclude social media services from the liability exemption. This is because, according to the CJEU’s case law, “control” is exercised only through algorithmic models that, based on criteria established by the service provider, make a decision on which information is displayed to which User. In contrast, there are still service providers that essentially leave the selection of displayed content up to their Users. This applies to traditional online forums, but is likely also true for purely chronological user feeds—such as those originally used by Twitter and, today, by services like Mastodon or BlueSky—where users make a decision about which other users to follow and then see those users’ posts in chronological order.

§

Such service providers are unlikely to exercise control in the sense described above and therefore, unlike the defendant’s service, do not fall under the CJEU case law outlined above. Ultimately, it is therefore up to the service provider to make the decision, in its own interest, whether to use algorithms to determine the conditions under which content is displayed and, in doing so, to assume control over the content and, consequently, liability for the content it displays. Insofar as the defendant refers to Recital 22 of the DSA and concludes from this that liability does not arise if the service provider “recommends information based on Users’ profiles or preferences,” the defendant fails to recognize that Recital 22 of the DSA states that such recommendations do not provide specific knowledge of the content; thus, these considerations relate solely to the element of “knowledge” required for liability.

§

However, the CJEU has expressly held that knowledge and control are two independent elements, each of which is capable in itself of precluding the liability exemption. The same applies to the defendant’s view that the CJEU linked control solely to whether the service provider makes a decision “whether” to disseminate information. This is already contradicted by para. 112 of the Webgroup and Coyote decision, in which the CJEU does not focus on the “whether,” but rather on “under what conditions, in what manner, and in what order this information is disseminated or not” (CJEU, NJW 2026, 2311, para. 112—Webgroup and Coyote). Furthermore, as outlined above, the defendant also makes a decision regarding “whether.” In the Chamber’s view, this should not be understood as purely binary in the sense of deciding whether a piece of information is displayed at all—that is, to anyone—or not. Rather, the defendant uses its algorithms to determine to whom information is displayed—that is, it decides the “whether” with respect to individual Users.

§

In the Chamber’s view, the CJEU’s reasoning can only be understood in this sense, because this decision also concerns the scope of dissemination and thus the severity of the infringement. If the defendant takes the view that the CJEU ultimately merely followed the opinion of the Advocate General, who provides for limited liability only for services that create their own body of information and make a decision on the dissemination of the information purely in their own interest, the Chamber does not agree with that view either. In this regard, it need not be determined whether the Advocate General is to be understood in this sense (see, in this regard, Advocate General, Opinion of September 18, 2025 – C-188/24, BeckRS 2025, 24063, para. 237 et seq.) First, it should be noted that the Advocate General expressly states in para. 238 of his Opinion that “it is possible” that algorithmic processing consists not in the curation of content but in the creation of a new body of information.

§

However, the CJEU did not address this point in its judgement. Furthermore, the Advocate General distinguishes between “curation” of content and actions that go beyond what the defendant does by algorithmically making a decision about the dissemination of content. Crucially, however, the CJEU has established fundamental principles for both cases. In doing so, the CJEU explicitly—and unlike the Advocate General—included, as part of the element of control, whether the service provider determines the ranking of the information (CJEU, NJW 2026, 2311, para. 112—Webgroup and Coyote). Thus, if one applies the general principle set forth in para. 112 of the CJEU decision, the trial court must examine whether the service provider determines “under what conditions, in what manner, and in what order information is disseminated or not.” This is the case here with the defendant. Furthermore, as outlined above, the CJEU had already referred to the element of control in its decision in YouTube and Cyando.

§

The CJEU thus suggests that the element of control could have been relevant in this case as well, although it ultimately did not play a decisive role in the decision. On the YouTube platform as well, it is well established that algorithms make the decision about which content is displayed. Furthermore, there are likely strong grounds to argue that control within the meaning of the CJEU’s case law has not yet been established if the service provider, for example, uses algorithms to filter out fake profiles, spam, and infringing content, because—depending on the specific case and regardless of whether there may be a legal obligation to filter such content—this is likely to be primarily in the Users’ interest. The situation is different, however, in the case of an algorithmically determined user feed, which, while also taking into account the users’ preferences and interests, does so by applying criteria that in any event also serve the commercial interests of the service provider—as is the case here with the defendant. 3.

§

However, even if the defendant could invoke Art. 6 of the DSA, it would be liable as an indirect infringer, since, in any case, with regard to the content submitted as Exhibits K22 and K29, it has failed to fulfill its obligation to act promptly upon becoming aware of or having knowledge of unlawful content or activities in order to block access to the unlawful content or to remove it. Under Article 6(1) of the DSA, a service provider is not liable for information stored on behalf of a user when providing an information society service consisting of the storage of information provided by a user, provided that the service provider a) has no actual knowledge of any unlawful activity or unlawful content and, with respect to claims for damages, is also unaware of any facts or circumstances from which an unlawful activity or unlawful content is clearly apparent, or b) as soon as it gains such knowledge or awareness, acts promptly to block access to the unlawful content or to remove it.

§

Even under the DSA, the provider of a social media service may be obligated, as an indirect contributor to the infringement, to refrain—after the affected party has lodged a complaint with the provider in an appropriate manner—from allowing a user to continue operating such “fake accounts.” Based on such an obligation to refrain from certain actions, the relevant social media enterprise may then be required not only to promptly block or remove the profiles or accounts complained of by the affected party in accordance with Article 6(b) of the DSA. Rather, this obligation—without requiring a further prior complaint from the affected party—also applies to future fake accounts disseminated via the social media service in question under a different web address that are identical or at least substantially similar (Munich Higher Regional Court, judgment of Jan. 20, 2026 – 18 U 2360/25, GRUR-Prax 2026, 224 – Fake Profile; see also Frankfurt am Main Higher Regional Court, MMR 2025, 898; Higher Regional Court of Nuremberg, MMR 2025, 147, para. 19). a. These requirements are met in this case.

§

The defendant failed to remove the disputed content in a timely manner. For the service provider to be obligated to take action, knowledge of specific unlawful information is required; therefore, the notice of an alleged infringement of personality rights must be precise enough to allow the service provider to easily locate the disputed content and readily determine its unlawfulness (Higher Regional Court of Frankfurt am Main, MMR 2025, 898, para. 12; Higher Regional Court of Nuremberg, MMR 2025, 147, para. 19, with further references). These requirements are met in this case. With regard to the obligations under the UrhDaG, which are stricter in this respect, it is further argued that the rights holder must provide the service provider with all relevant and necessary information so that the service provider can block specifically identified works and protected subject matter. This information must also include proof that the rights holder is entitled to the rights to the copyright-protected content.

§

The nature and scope of the required information depend on the state of the art and the technology used by the service provider to block the content. The rights holder must therefore generally provide all information necessary for the technical identification of a work by the service provider’s filtering software. In the absence of other established standards, this will generally be a reference file from which the service provider can extract the necessary information. If the rights holder provides no information, insufficient information, or information in unsuitable file formats, the obligation to block is limited to the content that the service provider can technically block using the information available to it. This is because, as a general rule, it is unreasonable to expect the service provider to independently assess the legality of content; the unlawfulness of an upload must therefore be readily apparent from the information provided by the rights holders and must not require any further assessment of its context (CJEU, GRUR 2022, 820, para. 90 – Poland v. Parliament and Council).

§

Furthermore, the information regarding the content to be blocked must be sufficiently specific to enable the service provider to block the content using “automated techniques and means” (CJEU, GRUR 2019, 1208, para. 45 et seq. – Glawischnig-Piesczek; see Dreier/Schulze/Raue, UrhG, 8th ed. 2025, § 7 UrhDaG, para. 18, with further references). Plaintiff No. 1 has fulfilled these requirements—and even the stricter requirements of the UrhDaG—by submitting reference files, stating that she herself does not place advertisements on the platform, and demonstrating that all profiles or posts contain images of Plaintiff No. 2 as well as the “F” label, are not profiles or posts authorized by her. First, in the lawsuit against the Defendant, Plaintiff No. 1 had previously submitted reference images to the Defendant (Exhibit K7) and reported over 200 violations (see Exhibit K18). To the extent that the defendant argues that the reported violations are not identifiable from the overview (Exhibit K18), its denial to that effect is unsubstantiated.

§

In the overview, each violation is identified by date, time, the report ID assigned by the defendant, type of content (e.g., “Profile” or “Ad”), and the description of the infringed right (e.g., “Impersonation” or “Trademark”). The reports previously submitted to the defendant are therefore readily traceable by the defendant. Furthermore, Plaintiff No. 1 explicitly informed the defendant in a letter dated October 1, 2024, under what circumstances and when which information is used that a fake profile or fake posts should be assumed. Based on these reports, it was clear to the defendant that the matters at issue constituted further infringements in the form of fake profiles using the trademark of Plaintiff No. 1). Furthermore, the information provided by Plaintiff No. 1 was formulated in such a way that, due to the almost algorithmic description of infringement cases, it readily enabled the Defendant to technically implement this description and thereby automatically detect potential further infringements. b. Ultimately, the question of whether the plaintiffs’ reports met the requirements of Art. 16(2) of the DSA was irrelevant.

appliesArt. 16(2)
§

In this regard, the defendant correctly points out that the injured party is required, inter alia, under Article 16(2), para. 2, subparagraph (b) of the DSA, to provide a clear indication of the exact electronic location of this information, such as the precise URL address or addresses, or, where necessary, additional information relevant to the Art of the content and the specific type of hosting service, in order to enable the service provider to verify the unlawful content. In the present case, however, it remains undisputed that the defendant deleted the relevant posts and profiles in response to multiple notices. It is therefore also established that the defendant was aware of the posts in question. Pursuant to Article 16(3) of the DSA, reports that meet the requirements of Article 16 of the DSA result in a presumption, for the purposes of Article 6 of the DSA, of actual knowledge or awareness regarding the specific piece of information in question, if they enable a hosting service provider acting with due diligence to determine, without an in-depth legal review, that the relevant activity or information is unlawful.

§

Since the reports “give rise to” a presumption of knowledge within the meaning of Article 6(1) of the DSA, it does not follow, by implication, that the service provider’s knowledge depends on the requirements being met. Pursuant to Art. 6(1) DSA, the service provider is not liable if, among other things, it has “no actual knowledge” of the unlawful content. How the service provider acquires this knowledge is irrelevant in this regard. For the obligation under Article 6(1)(b) of the DSA to apply, any form of acquiring such knowledge is sufficient (Hofmann/Raue/F. Hofmann, DSA, 2023, Art. 6, para. 53; Janal, GRUR 2022, 211, 218). Since the defendant was made aware of a large number of infringements and had evidently also located and deleted them, it was incumbent upon the defendant—who bore the burden of presentation and proof regarding the prerequisite for the liability exemption under Article 6(1) of the DSA— specify when it became aware of the infringements and what measures it subsequently took and when, thereby demonstrating that it acted “promptly” within the meaning of Art. 6(1)(b) of the DSA.

§

The defendant failed to do so with respect to the exemplary infringements at issue here (Exhibits K22, K24, K28, K29, and K33). c. However, even if the timing of the reports submitted by Plaintiff No. 1 were taken into account in this specific case, the Defendant would in any event have failed to delete two of the contested posts in a timely manner. According to the undisputed report on May 30, 2025, regarding the unlawful content shown in Exhibit K22 (A Profile “[Plaintiff No. 2]” containing the company identifier / graphic element of Plaintiff No. 1’s trademark) 20 days later. The plaintiff reported the unlawful content shown in Exhibit K29 (A profile “...” containing images of Plaintiff 2) to the defendant on June 5, 2025, as evident from Exhibits K27 and K29. The deletion period was 14 days. In any event, even in these two specific cases, the defendant did not enter into every reasonable effort to block the content in question.

§

A deletion period of 14 or 20 days in the case of such clear violations no longer constitutes prompt action. III. Plaintiff No. 1 is also entitled to the injunctive relief asserted in Suit 1c) under Section 15(4) of the German Trademark Act (MarkenG) due to infringement of Plaintiff No. 1’s business identifier “F.” Under Section 15(2) of the German Trademark Act (MarkenG), third parties are prohibited from using the business designation in commercial transactions without authorization in a manner likely to cause confusion with the protected designation. As with trademarks, the degree of similarity between the signs in terms of sound, visual appearance (including typography), and meaning or connotation must also be determined in the case of business designations (BGH, GRUR 2008, 803, para. 21 – HEITEC; Ingerl/Rohnke/Nordemann/Bröcker, MarkenG, 4th ed. 2023, § 15, para. 87). Where a business identifier is the earlier right, the likelihood of confusion must be assessed by taking into account all relevant circumstances of the individual case (BGH, GRUR 2016, 705, para. 23 – ConText; Ingerl/Rohnke/Nordemann/Bröcker, loc. cit., § 15, n. 70 with further references).

§

Factors to be considered here include the similarity of the signs, the distinctiveness of the protected designation, and the economic distance between the parties’ respective fields of activity (so-called “industry proximity”), whereby these factors interact with one another in such a way that a higher degree of one factor may lead to a finding of likelihood of confusion even if another factor is present to a lesser degree (see BGH, GRUR 2016, 705, para. 23 – ConText; Ingerl/Rohnke/Nordemann/Bröcker, op. cit., § 15, para. 71, with further references). Plaintiff No. 1 is the owner of the business identifier “F” pursuant to § 5(2) of the German Trademark Act (MarkenG). The defendant did not dispute this until the conclusion of the oral hearing. Plaintiff No. 1 also argued, uncontested until the conclusion of the oral proceedings, that her business identifier was used in the posts she objected to—in which the business identifier “F” was used in this form or in a slightly modified form— what was used by third parties without the consent of Plaintiff No. 1, specifically for identical services offered by Plaintiff No. 1.

§

If the defendant now considers the lawsuit to be unsubstantiated in this regard, any submission made in the brief dated August 6, 2026—which could be interpreted as a denial of the underlying facts—would be late pursuant to § 296a of the German Code of Civil Procedure (ZPO). Contrary to the defendant’s view, the lawsuit is not unfounded in this regard; rather, the plaintiff’s submission has not been contested. This uncontested submission is sufficient to establish an infringement of Plaintiff 1’s trade name rights through the publication and dissemination of the disputed posts. In the post submitted as Exhibit K24, the profile name “_F1” and the name “F” are clearly visible in a prominent position; in Exhibit K28, the profile name “_F” and the name “F”; in Exhibit K29, the profile name “...” is visible, and in Exhibit K33, the profile name “F.” In all cases, this constitutes use as a trademark, namely to identify the respective offerings of the Users.

§

The signs are identical or highly similar. Although the distinctiveness of the business mark “F” may initially be considered somewhat below average, as it has strongly descriptive connotations for the service “information in the field of finance,” However, due to its widespread use in the relevant market, it has attained at least average distinctiveness, so that, given the identity of the services and the identity of the marks or a high degree of similarity between them, a likelihood of confusion must be assumed overall. The defendant is also directly liable for these infringements, as it cannot invoke the limitation of liability under Art. 6 DSA. Reference is made to the above statements. However, even if the defendant could invoke this provision, it would have violated its duty to investigate. This is because Plaintiff No. 1 had already reported similar infringements to the defendant on multiple previous occasions (see Exhibit K18, “Trademark”) and had again pointed out such infringements in a letter dated October 1, 2024.

appliesArt. 6
§

The infringement was apparent from the posts even without a detailed review. Nevertheless, the defendant did not delete the post shown in Exhibit K29 until 14 days later and thus, at least in this case, failed to act promptly. Therefore, the issue of whether the defendant had infringed the trademark rights of Plaintiff 1)—on which the plaintiff bases its claim in the alternative—was no longer relevant. IV. Plaintiff No. 2 has a claim for injunctive relief against the defendant for infringement of his right of personality under §§ 1004(1) BGB by analogy, 823 para 1, 2 BGB in conjunction with §§ 22, 23 KUG (Claim 2.a) A social media profile or account that, without the consent of the person concerned, falsely represents—by using that person’s name and/or photos depicting them— that it is a profile or account belonging to the data subject, may infringe upon the data subject’s personality rights, name rights, and right to one’s own image (OLG Munich, Judgment of Jan. 20, 2026 – 18 U 2360/25, GRUR-RS 2026, 241).

§

The permissibility of publishing images must be assessed in accordance with the graduated protection concept set forth in Sections 22 and 23 of the German Artistic Copyright Act (KUG) (Federal Court of Justice [BGH], GRUR 2007, 527 – Winterurlaub; BGH, GRUR 2019, 866, para. 8 – A Mother for the Orphan; each with further references). Accordingly, images of a person may, as a general rule, be disseminated only with that person’s consent (Section 22, sentence 1, KUG). However, pursuant to Section 23(1)(1) KUG, an exception applies if the images pertain to contemporary history. This exception, however, does not apply to dissemination that infringes upon the legitimate interests of the person depicted pursuant to § 23(2) KUG (Federal Court of Justice [BGH], GRUR 2013, 1065, para. 10 – Ice Princess Alexandra). All of the contested profiles and posts (Exhibits K22, K24, K26, K28 through K31, and K33) indisputably contain images of Plaintiff No. 2.

§

Nor are these images from the field of contemporary history. Plaintiff No. 2 has also not given consent to the dissemination of these images. None of this is in dispute between the parties. The dissemination of these images constitutes an unlawful infringement of Plaintiff No. 2’s right of publicity. The defendant is also directly liable for these violations and cannot invoke the limited liability provision of Art. 6 of the DSA. Even if it could invoke the liability exemption under Article 6 of the DSA, it failed to delete the content from the profiles in a timely manner based on the reports submitted in 2024 and the letter dated October 1, 2024. Reference is made to the above statements. Even if the timing of the reports regarding the individual posts at issue were taken into account, the plaintiff would not have promptly deleted the content in question in accordance with Exhibit K 22 (deletion period: 20 days), Exhibit K 29 (deletion period: 14 days), and Annex K30 (deletion period: 62 days).

§

Reference is made to the above statements. The violation of data protection regulations, which Plaintiff No. 2 asserted “in the alternative,” was therefore no longer relevant. V. Plaintiff No. 2 may also assert against the defendant the claim for injunctive relief asserted in Claim 2.b) under § 1004(1), second sentence, and § 823(1) of the German Civil Code (BGB) in conjunction with Art. 1(1), Art. 2 para 1 of the Basic Law (GG) due to the infringement of the right to his name pursuant to § 12 BGB (see OLG Munich, judgment of Jan. 20, 2026 – 18 U 2360/25, GRUR-RS 2026, 241). Pursuant to § 12 BGB, the entitled party may demand that the other party remedy the infringement and, if there is a risk of recurrence, cease and desist, if the right to use a name is contested by another party or if the rights holder’s interests are infringed upon by another party’s unauthorized use of the same name.

§

The present case involves an unauthorized assumption of a name. Such a case requires that a third party use the same name without authorization, thereby causing confusion as to attribution and infringing upon the name holder’s interests worthy of protection (BGH, GRUR 2016, 1093, para. 13 – grit-lehmann.de, with further references). These requirements are met. 1. The plaintiff is the bearer of the civil name [Plaintiff No. 2]. This is not in dispute between the parties. The name is also used by users of the defendant’s “A” platform (see Exhibits K22, K26). 2. The use of a name is authorized within the meaning of § 12, sentence 1, BGB if the user has independent rights to that name. In addition, the bearer of a name may authorize another person to use that name, although such authorization may be limited to a specific purpose and is not permissible without restriction (BGH, GRUR 2016, 1093, para. 17 – grit-lehmann.de, with further references).

§

In the present case, it is undisputed that the profiles in question are “fake profiles” and that, consequently, they are not profiles created by the second plaintiff or authorized by him. It is also undisputed that the creators of these profiles do not themselves bear the name “[Plaintiff No. 2].” Thus, they have neither an inherent right to the name “[Plaintiff No. 2]” nor were they permitted by Plaintiff No. 2 to use the name. 3. The use of the name also gives rise to confusion regarding its attribution. For confusion regarding attribution to occur, it is necessary—but not sufficient—that there be an abstract risk that the use of the name by an unauthorized party will be understood as a reference to the name’s rightful owner, thereby causing a mistake regarding identity. Confusion regarding attribution in the narrow sense exists when the public assumes, based on the identical names, that both refer to the same person bearing that name.

§

Conversely, confusion regarding attribution in the broader sense exists when the user modifies the name, but the public assumes that organizational, familial, or other connections exist between the two bearers of the name (see BeckOGK/Niebel, Aug. 1, 2023, § 12 BGB, para. 158 et seq., with further references). In the present case, there is confusion regarding attribution in the narrower sense. Due to the identical name, the public assumes that the profiles at issue are those of Plaintiff No. 2). 4. The unauthorized use of the name also infringes upon the legitimate interests of Plaintiff No. 2). Neither the respective Users acting with fraudulent intent nor the Defendant have any interest worthy of consideration in using the Plaintiff’s name without his consent. 5. The defendant is also directly liable for these violations and cannot invoke the limited liability provision of Art. 6 of the DSA.

§

Even if it could invoke the liability exemption under Article 6 of the DSA, it would not have deleted the content from the profiles in a timely manner based on the reports filed in 2024 and the letter dated October 1, 2024. Reference is made to the above statements. Even if the timing of the reports regarding the individual posts at issue were taken as the basis, the plaintiff would not have deleted the content in a timely manner pursuant to Exhibit K 22 (deletion period: 20 days) and Exhibit K 26 (deletion period: 14 days), the plaintiff would not have deleted the content promptly within the meaning of Art. 6 DSA. Reference is made to the above statements. 6. The data protection claims further asserted by the plaintiff in support of his lawsuit Claim 2.b) were therefore no longer relevant. These are not rights within the meaning of the BGH’s TÜV case law described above. Rather, the subject matter of the dispute consists of the same claim and the same facts, which the second plaintiff merely substantiates with different legal bases.

§

This applies in the present case even if one were to assume that a claim under the GDPR and a national claim constitute different subjects of dispute. This is because Plaintiff No. 2 cannot invoke a claim for injunctive relief derived directly from the GDPR. This is because Article 17(1) of the GDPR itself does not constitute a legal basis for a claim for injunctive relief. However, it does not preclude a corresponding national claim for injunctive relief (see CJEU, NJW 2025, 3137, para. 52 – IP/Quirin Privatbank AG). In the event of a violation of Article 6 of the GDPR, claims for injunctive relief may therefore arise under Section 1004(1), second sentence, § 823(1) of the German Civil Code (BGB) in conjunction with Art. 1(1) and Art. 2(1) of the German Basic Law (GG) for infringement of the general right of personality, or, by analogy, pursuant to § 1004(1), second sentence, § 823(2) of the German Civil Code (BGB) in conjunction with Art. 6 of the GDPR (see Federal Court of Justice (BGH), judgment of June 23, 2026 – VI ZR 97/22, GRUR-RS 2026, 16576, para. 26—accidental sending of a messaging message during the job application process; see also Regional Court of Frankfurt am Main, ZD 2021, 46).

§

Consequently, Plaintiff No. 2 bases his claim solely on two legal grounds for a single infringement of his general right of personality: first, the infringement resulting from the use of personal data in the form of his name, and second, the infringement resulting from the use of his name. However, the right to one’s name under § 12 BGB constitutes merely a specific manifestation of the general right of personality (see BGH, NJW 2000, 2196, 2197 – Marlene Dietrich; Korte/Mensching, PresseR, 3rd ed. 2026, § 2, para. 270). VI. The risk of repetition required for the respective claims for injunctive relief is present in each case. As a general rule, the initial infringement indicates a risk of repetition (established case law of the BGH, GRUR 1997, 379, 380 – Wegfall der Wiederholungsgefahr II). Generally, the risk of repetition can be rebutted by submitting a cease-and-desist declaration subject to a penalty clause; however, the defendant refused to do so.

§

In doing so, the defendant demonstrates that the risk of repetition still exists (see Federal Court of Justice [BGH], GRUR 1998, 1045, 1046 – Brennwertkessel). Insofar as the claims for injunctive relief also relate to “substantially equivalent” forms of infringement, this encompasses forms of infringement that are substantively identical to the scope of the injunction (see OLG Munich, Judgment of Jan. 20, 2026 – 18 U 2360/25, GRUR-RS 2026, 241). VII. The decision regarding the imposition of a coercive fine is based in each case on § 890 of the German Code of Civil Procedure (ZPO). VIII. The plaintiffs are also entitled, on the merits, pursuant to § 823(1) BGB in conjunction with Art. 2(1) GG, Art. 1(1) GG, § 249(1) BGB, and § 15(5) MarkenG, a claim for a declaration of the defendant’s liability for damages as sought in Claim 4.a) (see also BGH, NJW 2000, 2195 – Marlene Dietrich). The defendant acted at least negligently.

§

Since the defendant is liable as the perpetrator and not merely as an interferer, a claim for damages is also not precluded. IX. Plaintiff No. 2) is further entitled to a declaration, as sought in lawsuit 4.b), of a right to compensation under § 823(1) of the German Civil Code (BGB) in conjunction with Art. 2(1) of the German Basic Law (GG), Art. 1(1) of the Basic Law, Sections 22 and 23 of the Artistic Freedom Act (KUG), and Section 249(1) of the German Civil Code (BGB). A culpable violation of the general right of personality gives rise to a claim for monetary compensation if the infringement is serious and the harm cannot be satisfactorily remedied in any other way. Whether a violation of the right of personality is so serious as to require the payment of monetary compensation can only be assessed on the basis of the totality of the circumstances of the individual case. In this regard, particular consideration must be given to the significance and scope of the infringement—that is, the extent of the publication’s dissemination, the lasting nature and duration of the harm to the injured party’s interests or reputation—as well as the perpetrator’s motive and the degree of his or her fault (BGH, NJW 2014, 2029, 2034, para. 38, with further references).

§

The award of monetary compensation in the case of a serious infringement of personality rights is objectively justified by the notion that, without such a claim, violations of human dignity and honor would often go unpunished, with the result that legal protection of personality rights would be undermined (see BGH, judgment of May 24, 2016 – VI ZR 496/15, BeckRS 2016, 11843, para. 9, with further references). Monetary compensation for an infringement of the general right of personality serves, on the one hand, to provide satisfaction to the victim and, on the other hand, to act as a deterrent (BGH, NJW 1996, 985, 987 – the principle of cumulation). However, in the context of this balancing test, the right to freedom of expression (Art. 5 GG) must also be taken into account. As a general rule, the claim is granted only when the very foundation of one’s personality is compromised—for example, in cases of serious intrusions into one’s intimate and privacy sphere, false allegations of particular significance to one’s personality, or serious public defamation (OLG Cologne, Judgement of July 30, 2020 – 15 U 313/19, GRUR-RS 2020, 56319, para. 26).

§

In light of these principles, a serious infringement of personality rights has occurred. In the present case, fraudulent offers are being disseminated using the likenesses and the legal name of Plaintiff No. 2, as a result of which third parties, believing the offers originated from the plaintiff, made investments and lost large sums of money. Consequently, there is a risk that Plaintiff No. 2 will be associated with these fraudulent activities. This constitutes a serious infringement of Plaintiff No. 2’s personality rights. In this regard, particular consideration must be given to the wide reach of the defendant’s platforms and the plaintiff’s public profile. Furthermore, it must be taken into account that this is not a one-time violation, but rather a series of recurring violations. Additionally, the fraudulent intent of the Users and their deliberate actions must be factored into the assessment.

§

Their right to freedom of expression must be given less weight in this context. The necessary preventive consideration must also be factored into the balancing of interests: on the one hand, with regard to Plaintiff 2) in relation to numerous further acts of infringement, as evidenced in the past; and, on the other hand, with respect to other users of the platforms who have fallen victim to the fraudulent activities of the creators of the fake profiles and, in some cases, have suffered significant financial losses. As for Plaintiff No. 2), it should be noted that he was granted both injunctive relief and damages on the merits. However, since the fake accounts and profiles contain false allegations of particular gravity (alleged investment recommendations made by Plaintiff No. 2) that could lead to serious public defamation, in particular the assumption that Plaintiff No. 2 made certain investment recommendations with fraudulent intent, there has been a serious infringement of Plaintiff No. 2’s personal rights, which justifies the award of appropriate compensation.

§

Since the defendant is liable as the perpetrator and not merely as a host provider, a claim for compensation is also not precluded. X. The plaintiffs also each have a right to information against the defendant, as requested in Suit 3 pursuant to § 242 BGB and § 19 MarkenG. The right to information also extends to content of a similar nature (see CJEU, GRUR 2019, 1208 – Glawischnig-Piesczek; Higher Regional Court of Frankfurt am Main, Order of March 4, 2025 – 16 W 10/25, GRUR-RS 2025, 3551, para. 26—claim for injunctive relief against platform operators regarding deepfake videos). It is not disproportionate. Automated filtering is possible based on the content presented by the plaintiffs. Since the plaintiffs’ enterprise is no more than ten years old and claims for damages are subject to a ten-year statute of limitations, no time limit on the claim was necessary. XI. The plaintiffs are further entitled to reimbursement of their legal costs from the defendant pursuant to Sections 683, 667, and 670 of the German Civil Code (BGB) and Section 14(6) of the German Trademark Act (MarkenG) in the amount claimed.

§

The plaintiffs’ claim for interest arises from Sections 288(1) and 291 of the German Civil Code (BGB). XII. The decision on costs is based on para 92(1), para 2(1), and para 100 of the German Code of Civil Procedure (ZPO). The allocation of costs takes into account the parties’ respective successes and defeats. XIII. The decision on provisional enforceability is based in each case on § 709 of the Code of Civil Procedure (ZPO). XIV. With regard to the lawsuit brief dated July 16, 2026, and the defendant’s brief dated August 6, 2026, the respective opposing party was not required to be granted a further opportunity to be heard. Nor was it necessary to reopen the oral hearing pursuant to § 156 ZPO. The briefs do not contain any new factual allegations relevant to the decision. XV. The value in dispute is set at EUR 300,000.00 (§ 3 ZPO). The value in dispute set by the plaintiffs was too low in view of the large number of alleged infringements and the plaintiffs’ prominence.

§

Of the total value in dispute, lawsuits 1.a) through 2.b) each account for a value in dispute of EUR 50,000.00, claim 3 accounts for a value in dispute of EUR 10,000.00, and claims 4.a) and 4.b) each account for a value in dispute of EUR 20,000.00. For better readability, typos have been corrected and formatting adjusted where necessary. Meta 2-06 O 234/25 September 16, 2026 Frankfurt am Main Regional Court, 6th Civil Chamber Judgement Subject Area: O § 7 UrhDaG, § 97 UrhG, § 14 MarkenG, §§ 22, 23 KunstUrhG, Art. 6 DSA Suggested citation: Regional Court of Frankfurt am Main, Judgement of September 16, 2026, Case No. 2-06 O 234/25 (REWIS RS 2026, 8634) Print references: REWIS RS 2026, 8634

appliesArt. 6

How it connects

63 of 115 paragraphs apply legislation or carry a topic — see them in the full text ↓
NOK 92M Norwegian DPA: Xandr's real-time bidding processed personal data of Grindr users The advertising technology company Xandr (controller, at that time AppNexus, now a part of Microsoft) engaged in so-called real-time bidding. Real-time bidding is a technology… Norway ·Datatilsynet (NO) ·Art. 4, 5, 6 +5 Oct 2, 2026 Personal Data IP Address Controllers