Case Law · CJEU EN LLM context A cited markdown file you can paste into your AI assistant (ChatGPT, Claude, a RAG or project knowledge base) to ground it in this document. Contains: this document’s text, its sections with their topics, and the full text of every law provision it applies. Everything links back to its source on overview.legal — legal information, not advice.

FASHION ID GmbH & Co. KG v. VERBRAUCHERZENTRALE NRW eV

C-40/17 Case
CJEU
ePrivacy Directive
AG Opinion
Personal Data Processing Cookies Direct Marketing Telecommunications IP Address Social Media Consent
Jul 29, 2019 Source
Summary

ePrivacy Directive: The ECJ did not determine whether the Facebook “Like” button involves such storing or access subject to the ePrivacy Directive, but left it to the national court to make this assessment and determine whether such consent would be required under the e-Privacy rules. The ECJ did not state whether such consent should be obtained by the website operator, by the third-party plugin, or by both.

How it connects

4 of 4 paragraphs apply legislation or carry a topic — see them in the full text ↓

References

Related across sources

Enforcement Italian DPA sanctions Lusha Systems for processing contact data without consent in B2B Garante per la protezione dei dati personali (Italy) News Danish SA Declares Use of Google Analytics Unlawful Without Supplementary Measures Datatilsynet News Irish Data Protection Commissioner Fines Instagram EUR 405M for Children Privacy Violations Hunton Andrews Kurth News DeFine is a calculator for GDPR fines based on method of the EDPB Kromann Reumert Guidance Guidelines 8/2020 on the targeting of social media users EDPB Guidance Joint Guidelines on the Interplay between the Digital Markets Act and the General Data Protection Regulation EDPB

Full text 4 paragraphs

Paragraphs carrying a topic or an applied provision show those connections inline Original at the source →
¶88

As a preliminary point, it should be noted that, according to the Commission, this question is irrelevant for the resolution of the dispute in the main proceedings, since consent was not obtained from the data subjects as is required by Article 5(3) of Directive 2002/58.

Consent applies Art. 5
¶89

In that regard, it should be pointed out that Article 5(3) of Directive 2002/58 provides that Member States are to ensure that the storing of information, or the gaining of access to information already stored, in the terminal equipment of a subscriber or user is allowed only on condition that the subscriber or user concerned has given his or her consent, having been provided with clear and comprehensive information, in accordance with Directive 95/46, inter alia, about the purposes of the processing.

Consent applies Art. 5
¶90

It is for the referring court to investigate whether, in a situation such as that at issue in the main proceedings, the provider of a social plugin, such as Facebook Ireland, gains access, as is maintained by the Commission, from the operator of the website to information stored in the terminal equipment, within the meaning of Article 5(3) of Directive 2002/58, of a visitor to that website.

Social Media applies Art. 5
¶91

In such circumstances, and since the referring court seems to have concluded that, in the present case, the data transmitted to Facebook Ireland are personal data, within the meaning of Directive 95/46, which, moreover, are not necessarily limited to information stored in the terminal equipment, which it is for that court to confirm, the Commission’s views are insufficient to call into question the relevance of the fourth question referred for the resolution of the dispute in the main proceedings, which concerns the potentially lawful processing of the data at issue in the main proceedings, as was pointed out by the Advocate General in point 115 of his Opinion.

Social Media Personal Data
Original document at the source eur-lex.europa.eu

Similar Content