News · noyb - European Center for Digital Rights EN LLM context A cited markdown file you can paste into your AI assistant (ChatGPT, Claude, a RAG or project knowledge base) to ground it in this document. Contains: this document’s text, its sections with their topics, and the full text of every law provision it applies. Everything links back to its source on overview.legal — legal information, not advice.

Vienna Superior Court: Facebook must give access to data

The Viennese Superior Court (Oberlandesgericht Wien) has delivered a ruling today that Facebook must pay Mr Schrems € 500 in emotional damages and grant him full access to all the data that Facebook holds about him.

Social Media Consent Personal Data Processing Consent Validity Requirements and Conditions
Dec 29, 2020 Source noyb.eu

Full text

The Viennese Superior Court (Oberlandesgericht Wien) has delivered a ruling today that Facebook must pay Mr Schrems € 500 in emotional damages and grant him full access to all the data that Facebook holds about him. However, the internet giant does not need to get consent from users to use their data under the EU data protection law (Article 6(1)(a) GDPR). Instead Facebook can simply grant itself the right to use all data in its terms and conditions (Article 6(1)(b) GDPR). Judgment (German Original, Relevant Parts from Page 22) Judgment (English Machine Translation, Relevant Parts from Page 22) Facebook's "consent bypass" legal? The GDPR allows different bases for the processing of personal data: For example, consent or a contract. Civil law contracts do not need to fulfill the strict requirements of "consent" under the GDPR. This would mean that the company does not have to give users a free choice and obtain separate and unambiguous consent. Other than under the system for consent, u

How it connects

References

Related across sources

C-645/19 Facebook Ireland Ltd and Others v Gegevensbeschermingsautoriteit In Case C-645/19, the Court of Justice of the European Union (Grand Chamber) addressed a preliminary ruling from the Brussels Court of Appeal concerning Facebook Ireland Ltd and… Grand Chamber Jun 15, 2021 Supervision Supervisory Authorities Controllers
C-311/18 Data Protection Commissioner v Facebook Ireland and Maximillian Schrems C-311/18 (Schrems II) Jul 16, 2020 Privacy Shield Processing Agreement International Transfer
C-40/17 Fashion ID GmbH & Co. KG v Verbraucherzentrale NRW eV C-40/17 (Fashion ID) Jul 29, 2019 Controllers Legitimate Interest Processors
C-446/21 Maximilian Schrems v Meta Platforms Ireland Limited In a preliminary ruling arising from proceedings between Maximilian Schrems and Meta Platforms Ireland Limited, the Court of Justice of the European Union interpreted GDPR… Fourth Chamber Oct 4, 2024 Retention Period Personal Data Marketing
C-654/23 Inteligo Media SA v Autoritatea Naţională de Supraveghere a Prelucrării Datelor cu Caracter Personal (ANSPDCP) Het Hof van Justitie van de EU (Eerste Kamer) beantwoordt een prejudiciële vraag over de uitleg van artikel 13 van Richtlijn 2002/58/EC (ePrivacy) en de verhouding tot de GDPR,… Mar 27, 2025 Telecommunications Personal Data Marketing
C-210/16 Unabhängiges Landeszentrum für Datenschutz v Wirtschaftsakademie Schleswig-Holstein C-210/16 (Wirtschaftsakademie) Jun 5, 2018 IP Address Controllers Processors
Related documents