C029-65 Airbnb Ireland UC
Case projectData Transfers
Filing DPAIDPC (Malta)
ControllerAirbnb Ireland UC
Case statusPending (3 - 4 years)
This is one of noyb 101 complaints which were filed after the "Schrems II" judgement in Summer 2020. The judgement invalidated the EU-US data transfer mechanism "Privacy Shield". The cases were generated based on implemented Google Analytics or Facebook tracking code on websites by EU providers, which leads to unlawful data transfers to the United States.
noyb called the DPC and requested a status update
Maltese DPA confirmed receipt and said it will forward it to the DPC
noyb sent the correct representation agreement
Masltese DPA informed us that the representation agreement sent was incorrect
Maltese DPA wrote that DPC is competent
Maltese DPA wrote: At this point, the Irish SA has confirmed to be the LSA for the one of Airbnb (CDP/COMP/344/2020). Once we are notified with any update, rest assured that we will inform you accordingly.
noyb asked for an update
Maltese DPA replied that they do not consider themselves competent
Maltese DPA replied stating that the controller is not established in Malta, and they are not competent under Art. 55 and 56. However, they will still cooperate closely with the other DPAs on the matter.
noyb sent followup email to Maltese DPA
Maltese DPA confirmed receipt of complaint
Maltese DPA confirmed receipt of complaints C029-65 and 66