Data Subject versus Social Media Platform Operator – Court Ruling (Germany, 2025)

Court Ruling
DPA LGLeipzig4 July 2025Germany
final
ePrivacy
Court Ruling

A German court ruled that a social media platform tracked users on other websites without their permission, even after they rejected cookies. This matters because it shows that companies must respect users' choices about their data. The ruling highlights the importance of clear consent for tracking practices.

What happened

The court found that the platform's Business Tools tracked users through third-party sites without consent and continued tracking even after users rejected cookies.

Who was affected

Website visitors whose browsing behavior was tracked by the platform's tools on third-party sites.

What the authority found

The court decided that the platform lacked a valid legal basis for processing personal data, violating GDPR's requirements for consent and transparency.

Why this matters

This ruling sets a precedent that companies must ensure they have proper consent for tracking users. Website operators should review their cookie policies and consent mechanisms to avoid similar issues.

GDPR Articles Cited

AI-verified

Art. 4(7) GDPR
Art. 5(1) GDPR
Art. 6(1) GDPR
Art. 82(GDPR)
View original scraped data
Art. 4(7) GDPR
Art. 5(1) GDPR
Art. 6(1) GDPR
Art. 82(GDPR)

Original data from scraper before AI verification against source document.

Decision AuthorityLG Leipzig
Source verified 19 March 2026
articles corrected
amount discrepancy
Full Legal Summary
Detailed

The social media platform was accused of tracking users through embedded Business Tools without consent, violating cookie consent requirements.

Outcome

Court Ruling

A ruling by a national court on a data-protection matter.

Violations (5)

Cookies Placed Before Consent
critical

Non-essential cookies (tracking, advertising) are placed on the user's device before obtaining valid consent.

Art. 6(1) GDPR

Cookies Persist After Rejection
critical

Tracking cookies remain active or are re-placed even after the user explicitly rejects them.

Art. 6(1) GDPR

Third-Party Cookies Without Consent
critical

Third-party tracking cookies or scripts are loaded without obtaining prior user consent.

Art. 13, 14 GDPR

Unclear Cookie Information
high

The cookie banner or cookie policy provides vague, incomplete, or unclear information about what cookies are used and why.

Art. 12, 13 GDPR

Misleading Banner Messaging
critical

The cookie banner uses misleading language to trick or pressure users into accepting cookies (dark patterns).

Art. 7 GDPR

Related Cases (0)

No other cases found for Data Subject versus Social Media Platform Operator in DE

This is the only recorded case for this entity in this jurisdiction.

Details

Ruling Date

4 July 2025

Authority

DPA LGLeipzig

About this data

Data: GDPRhub (noyb.eu)
Licensed under CC BY-NC-SA 4.0
AI-verified and classified
Cookie relevance: 100%

Cite as: Cookie Fines. Data Subject versus Social Media Platform Operator - Germany (2025). Retrieved from cookiefines.eu

Report Inaccuracy

Last updated: