# FASHION ID GmbH & Co. KG v. VERBRAUCHERZENTRALE NRW eV

- Type: Case Law
- Source: CJEU
- Date: 2019-07-29
- Original: https://eur-lex.europa.eu/legal-content/EN/TXT/?uri=CELEX:62017CJ0345&ref=6127
- Canonical: https://overview.legal/posts/6127
- Topics: Joint Controllers, Controllers, IP Address, Personal Data, Processing, Data Controller, Liability

## Summary

Concept of joint-controllers: The operator of a website, such as Fashion ID, that embeds on that website a social plugin causing the browser of a visitor to that website to request content from the provider of that plugin and, to that end, to transmit to that provider the personal data of the visitor can be considered to be a controller. That liability is, however, limited to the operation or set of operations involving the processing of personal data in respect of which it actually determines t

## Full text

## Court Summary

Concept of joint-controllers: The operator of a website, such as Fashion ID, that embeds on that website a social plugin causing the browser of a visitor to that website to request content from the provider of that plugin and, to that end, to transmit to that provider the personal data of the visitor can be considered to be a controller. That liability is, however, limited to the operation or set of operations involving the processing of personal data in respect of which it actually determines the purposes and means, that is to say, the collection and disclosure by transmission of the data at issue. (¶85)

## Excerpt

85      In the light of the findings above, the answer to the second question is that the operator of a website, such as Fashion ID, that embeds on that website a social plugin causing the browser of a visitor to that website to request content from the provider of that plugin and, to that end, to transmit to that provider the personal data of the visitor can be considered to be a controller, within the meaning of Article 2(d) of Directive 95/46. That liability is, however, limited to the operation or set of operations involving the processing of personal data in respect of which it actually determines the purposes and means, that is to say, the collection and disclosure by transmission of the data at issue.

## Cited law provisions (1)

### GDPR — gdpr-art-2-en

Material scope

---
Generated by overview.legal · https://overview.legal/posts/6127 · 2026-08-22