C029-61 Vacaciones eDreams S.L.

Data Transfers
Case project
Controller
Vacaciones eDreams S.L.
Case status
Won
Filed: (3 years 8 months ago)

This is one of noyb 101 complaints which were filed after the "Schrems II" judgement in Summer 2020. The judgement invalidated the EU-US data transfer mechanism "Privacy Shield". The cases were generated based on implemented Google Analytics or Facebook tracking code on websites by EU providers, which leads to unlawful data transfers to the United States.

Protocol
Date Summary
06.03.2024
decision by Spanish DPA

Spanish DPA found a violation of Art 44 GDPR due to data transfers in the US by the controller

06.03.2024
internal appeal decision

Spanish DPA dismissed the controller's (internal) appeal

15.10.2021
We received a letter by the AEPD

We received a letter by the AEPD, stating that the investigation will be stopped under Spanish law because it has been going on for more than one year. This seems to be a formality and the case will be taken up again.

04.08.2021
noyb again asked the AEPD for an update
29.10.2020
noyb asked the the AEPD if they consider themselves competent to handle the complaint and asked for access to the files of the case
28.10.2020
Letter by the AEDP outlining the further course of the procedure
18.09.2020
AEPD confirmed of receipt of the complaint
16.09.2020
noyb sent followup email to the AEPD
17.08.2020
Complaint