Skip to content
News · noyb - European Center for Digital Rights EN LLM context A cited markdown file you can paste into your AI assistant (ChatGPT, Claude, a RAG or project knowledge base) to ground it in this document. Contains: this document’s text, its sections with their topics, and the full text of every law provision it applies. Everything links back to its source on overview.legal — legal information, not advice.

Two are better than one?! Profil.at strikes back with forced banner, when users make the "wrong" choice.

Cookie Banners Two are better than one?!

Full text

Cookie Banners Two are better than one?! Profil.at strikes back with forced banner, when users make the "wrong" choice. Today, noyb.eu filed a GDPR complaint against the Austrian news magazine Profil. If you want to visit profil.at, you can reject all cookies in the first step. If one does so, however, a second banner pops up where one must agree to Google and other tracking cookies. Such forced consent is clearly prohibited under the GDPR. Complaint with Austrian Data Protection Authority (PDF) Forced consent in two acts. Anyone who wants to read an article on profil.at and reject cookies, faces an impossible task: at first glance, profil.at obtains consent for tracking cookies. However, if you reject these, you are forced to agree to cookies from Google and ÖWA (Austrian Web Analysis) in a second step, because "only in this way can the platform be operated in a meaningful way". Once agreed to, this consent can also not be revoked. „Profil.at has a particularly shameless system where

How it connects

451423 French Supreme Court reviews CNIL €35M cookie consent fine against Amazon The French DPA had received a complaint on 28 May 2018 regarding the lawfulness of processing by Amazon Europe Core ('Provider' or 'The company'). The French DPA had forwarded… Supreme Administrative Court Jun 27, 2022 Consent Cookies Supervision
449209 CE asks CJEU if GDPR one-stop-shop applies to ePrivacy cookie consent cases On 7 December 2020, the French DPA (CNIL) imposed two fines totaling € 100 million on Google LLC and Google Ireland Ltd for violating Article 82 of the French Data Protection Act… Jan 28, 2022 Consent Supervision Supervisory Authorities
449212 CE upholds CNIL competence to fine Google €100M for cookies despite no lead authority role On December, 7 2020, the French DPA imposed a financial penalty of 60 Million euros fine against Google LLC and a 40 million euros against Google Ireland Limited in accordance… Mar 4, 2021 Supervisory Authorities Supervision Cookies
3 O 762/19 LG Rostock: Pre-ticked cookie consent boxes invalid under Art 6(1)(a) GDPR The German consumer organisation Bundesverband der Verbraucherzentralen und Verbraucherverbände - Verbraucherzentrale Bundesverband e.V. (vzbv, the claimant) filed a lawsuit… Sep 15, 2020 Consent Legitimate Interest Controllers
C-252/21 Meta Platforms v noyb C-252/21 (Meta Platforms (noyb)) CJEU Jan 12, 2023 Supervisory Authorities IP Address Supervision
C-604/22 IAB Europe v Gegevensbeschermingsautoriteit In Case C-604/22, the Court of Justice of the European Union ruled on a preliminary reference from the Brussels Court of Appeal in proceedings between IAB Europe and the Belgian… CJEU ·Fourth Chamber Mar 7, 2024 IP Address Controllers Personal Data