CNIL (France) - SAN-2025-017

added links to GDPR articles === Holding ====== Holding === The DPA found that, since the membership form did not contain information on the transmission of members' data to the social media platform, or even on targeted advertising, the consent was not informed nor specific. Therefore, it found the processing to be unlawful, violating Article 6(1)(a) GDPR. The DPA found that, since the membership form did not contain information on the transmission of members' data to the social media platform, or even on targeted advertising, the consent was not informed nor specific. Therefore, it found the processing to be unlawful, violating [[Article 6 GDPR|Article 6(1)(a) GDPR]]. Furthermore, the DPA noted that the information regarding this processing activity was hard to find for data subjects. The data subject needed to find the links to the information, which was far from the consent button, at the end of the page. Then, the data subject had to consult two documents, each one conta