Redes sociales y datos personales: bases jurídicas para el tratamiento e implicación de las autoridades de defensa de la competencia
Loading...
Full text at PDC
Publication date
2022
Advisors (or tutors)
Editors
Journal Title
Journal ISSN
Volume Title
Publisher
Citation
Abstract
Se analizan las restricciones que el RGPD impone a la prestación de servicios digitales ofrecidos como gratuitos a sus usuarios privados porque su prestación se financia mediante publicidad personalizada. A la luz de la reciente jurisprudencia del Tribunal de Justicia se aborda la insuficiencia de la ejecución del contrato de prestación del servicio como fundamento de la licitud del tratamiento por parte del operador de la red social en tales situaciones, así como la inadecuación de otras pretendidas bases de licitud del tratamiento, con especial atención a los requisitos y límites del consentimiento del afectado como fundamento del tratamiento. Se abordan también las recientes aportaciones de la jurisprudencia del Tribunal de Justicia con respecto a la coordinación entre las autoridades de control en materia de protección de datos y las de defensa de la competencia cuando estas deben examinar la conformidad de ciertas actividades con el RGPD.
The restrictions that the GDPR imposes on the provision of digital services that are offered as free of charge to their private users because they are financed by the personalised use of consumers’ personal data for targeted advertising are discussed. In the light of the recent case law of the Court of Justice, the performance of the contract for the provision of the social network service as a basis for the lawfulness of processing in such situations is addressed, as well as the inadequacy of other purported bases for the lawfulness of processing, with particular attention to the requirements and limits of the data subject's consent as a basis for processing. Furthermore, the CJEU has also provided guidance on the interplay between the data protection supervisory authorities and the examination by the competition authorities whether certain activities comply with the GDPR in the context of the finding of an abuse of a dominant position.
The restrictions that the GDPR imposes on the provision of digital services that are offered as free of charge to their private users because they are financed by the personalised use of consumers’ personal data for targeted advertising are discussed. In the light of the recent case law of the Court of Justice, the performance of the contract for the provision of the social network service as a basis for the lawfulness of processing in such situations is addressed, as well as the inadequacy of other purported bases for the lawfulness of processing, with particular attention to the requirements and limits of the data subject's consent as a basis for processing. Furthermore, the CJEU has also provided guidance on the interplay between the data protection supervisory authorities and the examination by the competition authorities whether certain activities comply with the GDPR in the context of the finding of an abuse of a dominant position.