Pflegeplatzmanager GmbHhttps://gruendelpartner.de/newsroom/gruendelpartner-erwirkt-weitreichende-entscheidung-zur-unzulaessigkeit-von-cloud-und-it-dienstleistungen-durch-us-tochterunternehmen-in-deutschland/ – Court Ruling (Germany, 2022)
General GDPR enforcement action
This case relates to broader data protection obligations, not specifically to cookie or consent banner compliance. It is not included in cookie statistics or the Risk Calculator.
A German court ruled on a public procurement case involving data protection concerns with cloud services. The court examined whether using a US-based cloud service provider complied with EU data protection laws. This decision is significant for companies using international cloud services, emphasizing the need for compliance with EU privacy standards.
What happened
The court reviewed a procurement decision involving the use of a US-based cloud service provider by a publicly owned company.
Who was affected
Publicly owned companies and their data protection practices in procurement processes.
What the authority found
The court examined if using a US-based cloud provider met EU data protection requirements.
Why this matters
This ruling highlights the complexities of using international cloud services under EU privacy laws. Companies must ensure their service providers comply with EU data protection standards.
GDPR Articles Cited
National Law Articles
The case concerned a decision by Vergabekammer Baden-Württemberg (Procurement Chamber Baden-Württemberg), the administrative authority that reviews public procurement procedures. A publicly owned company (Regionale Kliniken Holding RKH GmbH, today RKH Regionale Kliniken Holding und Services GmbH), owned only by municipalities and regional authorities and therefore subject to public procurement law, invited tenders for the procurement of software for digital administration in an open procedure throughout Europe.https://ausschreibungen-deutschland.de/843547_Software_fuer_Digitales_EntlassmanagementReferenznummer_der_Bekanntmachung_2021-20-WEI-OV_2021_Ludwigsburg The criteria contained, among other things, requirements for data protection and IT security. The company inviting the tenders received offers from company A and company B (Pflegeplatzmanager GmbH)https://gruendelpartner.de/newsroom/gruendelpartner-erwirkt-weitreichende-entscheidung-zur-unzulaessigkeit-von-cloud-und-it-dienstleistungen-durch-us-tochterunternehmen-in-deutschland/. Company A used the services of company C (Amazon Web Services EMEA S.à r.l.)The decision was pulished via [http://web.archive.org/web/20220812064735/https://rewis.io/urteile/urteil/ocw-13-07-2022-1-vk-2322/ rewis.io]. The used clauses are unique to [https://d1.awsstatic.com/legal/aws-gdpr/AWS_GDPR_DPA.pdf AWS]. a subsidiary of company D (Amazon Web Services, Inc.) based in the United States, as a sub-processor. Its servers were located in the EU. Company C included clauses in its offer stating that it would not disclose customer data to any third party, except as necessary to maintain or provide the services, or as necessary to comply with the law or a valid and binding order of a governmental body. After reviewing the offers, the publicly owned company issued a decision where it awarded the contract to Company A, as their evaluation of the price was the most economical. Company B challenged this decision. It argued that company A had
Outcome
Court Ruling
A ruling by a national court on a data-protection matter.
Related Cases (0)
No other cases found for Pflegeplatzmanager GmbHhttps://gruendelpartner.de/newsroom/gruendelpartner-erwirkt-weitreichende-entscheidung-zur-unzulaessigkeit-von-cloud-und-it-dienstleistungen-durch-us-tochterunternehmen-in-deutschland/ in DE
This is the only recorded case for this entity in this jurisdiction.
Details
About this data
Cite as: Cookie Fines. Pflegeplatzmanager GmbHhttps://gruendelpartner.de/newsroom/gruendelpartner-erwirkt-weitreichende-entscheidung-zur-unzulaessigkeit-von-cloud-und-it-dienstleistungen-durch-us-tochterunternehmen-in-deutschland/ - Germany (2022). Retrieved from cookiefines.eu
Last updated: