One goal of the GDPR is to empower individuals (“data subjects”), and give them control over their personal data. These rights include:
- right of access, allowing to understand what data is processed in which way,
- the right to rectification, if data is incorrect,
- the right to erasure, if data was unlawfully processed,
- the right to restrict processing,
- the right to data portability, to switch to other services,
- the right to object, if users fell that their individual situation was not taken into account in a companies‘ legitimate interest assessment, or in the case of direct marketing and
- and the right not to be subject to a decision based solely on automated processing.
These rights impose positive obligations on data controllers and are enforceable before independent data protection authorities and courts. In reality, many controllers do not fully comply with these rights or make it extremely hard for users to exercise their rights. The main goal of these projects is
- to encourage users to exercise their fundamental right to privacy and provide information on how to do so
- to gain a deeper understanding of processing and usage of data by different industries through filing access requests (Article 15 GDPR) and
- to make sure that companies respect data subjects’ rights and consistently comply with the requests of users.
| Case | Controller | DPA | Status | Duration |
|---|---|---|---|---|
| C005 | Criteo | CNIL (France) | Won | Filed:
(6 years 5 months ago) |
| C006 | Google Ireland Limited | DSB (Austria), DPC (Ireland) | Pending (4 years and more) | Filed:
(6 years 4 months ago) |
| C007 | Netflix | DSB (Austria), AP (The Netherlands) | Partly Won | Filed:
Closed: (5 years 11 months) |
| C008 | Netflix | DSB (Austria), AP (The Netherlands) | Partly Won | Filed:
(6 years 3 months ago) |
| C009 | DAZN - Perform Investment Ltd. | DSB (Austria), ICO (UK) | Partly Won | Filed:
(6 years 3 months ago) |
| C010 | DAZN - Perform Investment Ltd. | DSB (Austria), ICO (UK) | Partly Won | Filed:
(6 years 3 months ago) |
| C011 | Soundcloud | BlnBDI (Berlin), DSB (Austria) | Pending (4 years and more) | Filed:
(6 years 3 months ago) |
| C012 | Grindr LLC | DSB (Austria) | Pending (3 - 4 years) | Filed:
(3 years 5 months ago) |
| C013 | Flimmit | DSB (Austria) | Lost | Filed:
(6 years 3 months ago) |
| C014 | YouTube LLC (USA) | DSB (Austria), DPC (Ireland) | Pending (4 years and more) | Filed:
(6 years 3 months ago) |
| C015 | Spotify | DSB (Austria), IMY (Sweden) | Won | Filed:
(6 years 3 months ago) |
| C016 | Amazon (Luxemburg) | DSB (Austria), CNPD (Luxembourg) | Pending (4 years and more) | Filed:
(6 years 3 months ago) |
| C017 | Apple Ireland | DSB (Austria), DPC (Ireland) | Pending (4 years and more) | Filed:
(6 years 3 months ago) |
| C027 | A1 Telekom Austria | DSB (Austria) | Pending (4 years and more) | Filed:
(4 years 7 months ago) |
| C030 | AZ Direct | DSB (Austria) | Pending (4 years and more) | Filed:
(4 years 6 months ago) |
| C032 | Wizz Air | DSB (Austria), NAIH (Hungary) | Pending (4 years and more) | Filed:
Closed: (1 year 9 months) |
| C039 | KSV 1870 | DSB (Austria) | Won | Filed:
Closed: (1 year 11 months) |
| C044 | CRIF Bürgel (Germany) | HBDI (Hesse), BayLDA (Bavaria), LfDI (Baden-Württemberg) | Pending (3 - 4 years) | Filed:
(3 years 6 months ago) |
| C054 | Google LLC | DSB (Austria) | Pending (3 - 4 years) | Filed:
(3 years 4 months ago) |
| C056 | Bolt | DSB (Austria), AKI (Estonia) | Won | Filed:
(3 years 2 months ago) |
