Dutch appeals court against Oracle and Salesforce in GDPR-related cookie case

A Dutch appeals court has ruled that Oracle and Salesforce must continue to defend a class action lawsuit related to the use of cookies to collect and track personal information for Data Management Platforms (DMPs).

The case raises issues about who is responsible when websites use third-party data platforms to track users, and relies on the European Union’s General Data Protection Regulation (GDPR). The plaintiff in the case is the Privacy Collective (TPC), a Dutch non-profit organization that focuses on consumer privacy issues.

In the decision, the court summarized TPC’s allegations against Oracle and Salesforce: “Oracle and Salesforce collect personal data from Internet users in the context of the DMP service they provide, process it into detailed profiles and sell this information to third parties to provide strength. , among other things, to serve personalized advertisements on websites. According to TPC, this data collection begins with Oracle and Salesforce placing a cookie on the Internet user’s device (and) personal data is collected. Oracle and Salesforce enrich the data and other unique identifiers collected by the cookie with information from other sources. According to TPC, Oracle and Salesforce create a profile every day to provide as complete an overview as possible of the character traits and interests of the person in question. The purpose of data processing is, among other things, to share the profile of the Internet user through a process called Real Time Bidding (hereinafter: RTB). The Internet user profile is provided to advertisers in a fast, fully automated process for a fee, in order to display personalized advertisements on websites.”


Source link