website visitor and Google user (data subject and complainant) – Complaint Upheld (Austria, 2021)
The Austrian DPA upheld a complaint against a website for using Google Analytics without proper consent, following the Schrems II ruling. The case involved data transfers to the U.S. without adequate protection. This decision highlights the need for websites to ensure compliance with data transfer rules, especially when using third-party services like Google Analytics.
What happened
The Austrian DPA upheld a complaint against a website for using Google Analytics without proper consent for data transfers to the U.S.
Who was affected
A website visitor who used a health-related site while logged into their Google account.
What the authority found
The DPA found that the website used Google Analytics without obtaining proper consent for data transfers, violating GDPR requirements.
Why this matters
This decision underscores the importance of obtaining proper consent for data transfers, especially after the Schrems II ruling. Website operators should review their use of third-party tools to ensure compliance with data protection laws.
GDPR Articles Cited
National Law Articles
Entities Involved
The case involves data transfers from EEA websites to Google LLC in the US without proper consent, following the Schrems II ruling.
Outcome
Complaint Upheld
A data subject complaint that was upheld by the DPA.
Violations (2)
Non-essential cookies (tracking, advertising) are placed on the user's device before obtaining valid consent.
Art. 6(1) GDPR
Third-party tracking cookies or scripts are loaded without obtaining prior user consent.
Art. 13, 14 GDPR
Related Enforcement Actions (0)
No other enforcement actions found for website visitor and Google user (data subject and complainant) in AT
This is the only recorded action for this entity in this jurisdiction.
Similar Cases
Enforcement actions with similar violations
Details
About this data
Cite as: Cookie Fines. website visitor and Google user (data subject and complainant) - Austria (2021). Retrieved from cookiefines.eu
Last updated: