- Enforcing jurisdiction
- Netherlands · Geography does not establish applicable law.
- Confirmed applicable legislation
- Privacy topics
DPA case Takeaway B.V. - z2022-04011 – Complaint Upheld (Netherlands, 2024)
Takeaway B.V. shared personal data with Google Analytics without getting proper consent from users. This is important because it shows that companies must obtain user consent before tracking their data. The ruling emphasizes the need for businesses to be transparent about their data practices and respect user privacy.
What happened
Takeaway B.V. transferred personal data, including cookie identifiers, to Google Analytics in the U.S. without valid user consent.
Who was affected
Users of Takeaway B.V. whose personal data was shared without their consent.
What the authority found
The DPA found that Takeaway B.V. violated GDPR by transferring personal data without obtaining the necessary consent from users.
Why this matters
This ruling highlights the critical need for businesses to ensure they have user consent before engaging in data tracking. It sets a precedent for stricter compliance with privacy laws regarding data sharing.
View original scraped data
Original imported citations before automated processing; the processing history does not establish independent verification.
Source checks
Secondary-source text retrieved.
Review needed — 18 October 2026.
Processing notes: articles corrected, bucket conflicts with cookie scope.
Retrieved text may be a secondary summary or an announcement. These automated statuses do not establish that the original decision was read or that the record received an independent legal review. How we check sources
Takeaway B.V. transferred personal data, including cookie identifiers, to Google Analytics servers in the U.S.A without valid consent, involving third-party tracking without consent.
Outcome
Complaint Upheld
A data subject complaint that was upheld by the DPA.
Related Enforcement Actions (0)
No other enforcement actions found for DPA case Takeaway B.V. - z2022-04011 in NL
This is the only recorded action for this entity in this jurisdiction.
Similar Cases
Enforcement actions with similar violations
DPA case 9782890
2022 · Garante per la protezione dei dati personali
DPA case 9788429
2022 · Garante per la protezione dei dati personali
DPA case 11/2022
2022 · Autorité de Protection des Données
DPA case ZSPR.440.331.2019.PR.PAM
2021 · Urząd Ochrony Danych Osobowych
Posti Oy
2022 · Finnish Transport and Communications Agency Traficom
Details
About this data
Cite as: Cookie Fines. DPA case Takeaway B.V. - z2022-04011 - Netherlands (2024). Retrieved from cookiefines.eu
Last updated: