Real Cases

Question 1

Google - Right To Be Forgotten
- 2 parties involved

• Issue
• Cjeu ruled that:
• the right to erasure is not absolute and…
• when requesing the removal of inaccurate content…
• search engine once… are required to …

Articles involved:
Article … and …

Question 2

CNIL vs GOOGLE -Extent of the right to be forgotten.

• 2 parties involved

Cjeu ruled that gdpr obligations apply…

Why?
Eu must balance … while avoiding …

Question 3

Beyer Case - Can Ip Addresses be considered personal data?

• 2 parties involved
• doubts arised
• cjeu ruled that it is personal data if …

Question 4

Jehovah’s witnesses case - material scope of the gdpr.

• parties involved
• main doubt
• cjeu ruled that:
• the type of activity is not…
• even if not automated means …

Question 5

Orange Romania - Valid Consent
- 2 Parties Involved
- Facts about the storage of id copies.

• Cjeu ruled:
  1) pre-checked box…
  2) not freely given if …
  3) missing information about …

Question 6

Mrs Lindqvist - Material Scope of the GDPR.

2 Parties involved.

Fatcs about the website of the parish.

Cjeu ruled that:
1) loading to a website is…
2) loating to a website is not considered…
3) it is not a … activity beacause it has a … purpose
4) processing of xxx is prohibited

Question 7

Google Spain Case - Right to Erasure
- parties involved

-facts x y z, even after more than 10 years.

cjeu ruled that:
- is google a data controller? it is because …
- why does the balancing test fails? because 1 and 2 ok but 3…

Question 8

Manni Case - Right to Erasure

• 2 Parties Involved
• Facts: Manni is present in the business register of the Chamber of Commerce of Lecce as …
• He claims that …
• Cjeu ruled that:
• individual involved in trades …
• left to the national court to assess if …

Question 9

LEISTRITZ CASE - independence of the DPO.

2 parties involved.

Fact.

Cjeu was questioned about whether …
And it emphasized that …

Question 10

META #0
- what does meta provide to users?
- What is its source of revenue?… that is fueled by 2 types of data.
- where is the information about the processing of personal data?

Question 11

META PROBLEM #1
- off platform data collected by cookies includes… that is generally … by the gdpr

About this, cjeu noted that meta has 2 alternatives: …

Data manifestly made public by data subject is not valid because…

Explicit consent is not valid because…

Question 12

META PROBLEM #2
CJEU examined whether xxx operations performed by meta have a valid xxx :
- 6.1.b necessity for the performance of a contract?
- 6.1.f legitimate interest?
- 6.1.a consent? Informed and specific? Freely given? Unambiguous?

Question 13

Planet 49 Case - Consent for Cookies

• 2 parties involved
• Facts: during the registration for lotteries users were presented with … authorizing …

Referring to directive 95/46 and to the eprivacy directive, cjeu ruled that: …

Question 14

Meta Platforms Ireland - New Players in GDPR enforcement.

2 parties: … and …
The latter initiated legal actions for … of gdpr.

Cjeu was questioned whether a … can …. for a gdpr breach.
Cjeu ruled that:
- if lsa … to act, then … can initiate …

Why is this case important?
It xxx the scope of gdpr … by introducing …

Question 15

Facebook Ireland - DPA Possibilities
2 parties involved

Facebook argued that under the …, the … had the jurisdiction to xxx

CJEU stated that:
- generally xxx has exclusively jurisdiction over xxx
- However DPA can act indipendently if 3 cases.

Question 16

H&M Case:
2 parties involved

Issues:
- after periods of xxx employees were required to be subject to the so called xxx.
- these talks were recorded without emplooyes being …
- talks included both xxx and yyy personal data.
- records were used to xxx of the employee and take xxx regarding the employment.

CJEU fined H&M with a fine of 35 mil.
Breach of article 5, 6, 9