News · noyb - European Center for Digital Rights EN LLM context A cited markdown file you can paste into your AI assistant (ChatGPT, Claude, a RAG or project knowledge base) to ground it in this document. Contains: this document’s text, its sections with their topics, and the full text of every law provision it applies. Everything links back to its source on overview.legal — legal information, not advice.

Vienna Superior Court: Facebook must give access to data

Consent Personal Data Social Media Processing Consent Validity Requirements and Conditions
Dec 29, 2020 Source

How it connects

References

Related across sources

Enforcement AEPD (Spain) - PS/00249/2025 AEPD (Spain) Enforcement AEPD fines El Español for disclosing minor's identity in assault video AEPD (Spain) Enforcement HDPA (Greece) 33/2020 — Employee's access and erasure claims against the American College HDPA (Greece) Case Law Spanish court reviews DPA decision on KFC Spain website privacy information and DPO National Court Enforcement Italian DPA sanctions Lusha Systems for processing contact data without consent in B2B Garante per la protezione dei dati personali (Italy) Literature Automating the Design and Development of Usable, GDPR-Aware Web Forms SN Computer Science

Full text

The Viennese Superior Court (Oberlandesgericht Wien) has delivered a ruling today that Facebook must pay Mr Schrems € 500 in emotional damages and grant him full access to all the data that Facebook holds about him. However, the internet giant does not need to get consent from users to use their data under the EU data protection law (Article 6(1)(a) GDPR). Instead Facebook can simply grant itself the right to use all data in its terms and conditions (Article 6(1)(b) GDPR). Judgment (German Original, Relevant Parts from Page 22) Judgment (English Machine Translation, Relevant Parts from Page 22) Facebook's "consent bypass" legal? The GDPR allows different bases for the processing of personal data: For example, consent or a contract. Civil law contracts do not need to fulfill the strict requirements of "consent" under the GDPR. This would mean that the company does not have to give users a free choice and obtain separate and unambiguous consent. Other than under the system for consent, u

Original document at the source noyb.eu

Similar Content