C029-9 Coop Sverige AB

Data Transfers
Case project
Filing DPA
Controller
Coop Sverige AB
Case status
Other Outcome
Filed: (3 years 9 months ago)

This is one of noyb 101 complaints which were filed after the "Schrems II" judgement in Summer 2020. The judgement invalidated the EU-US data transfer mechanism "Privacy Shield". The cases were generated based on implemented Google Analytics or Facebook tracking code on websites by EU providers, which leads to unlawful data transfers to the United States.

Protocol
Date Summary
03.07.2023
IMY issues decision against controller

Ban of Google Analytics but no fine imposed. We have not been served with the decision as the IMY does not treat data subjects as parties but it was published here: https://www.imy.se/en/news/companies-must-stop-using-google-analytics/

22.06.2023
Swedish DPA tells us that the data subject is not a party to the case and the case has been closed

"That case is closed (DI-2020-11376 noyb case number C029-9). It is a local case and in Sweden the complainant is not a party in Sweden, which means that Noyb does not need to be served according to 60 (3)."

21.06.2023
noyb sent an email to IMY and requested for an update
26.07.2022
noyb called the IMY

Very rough estimate was six weeks for the decisions to be done.

17.02.2022
noyb asked the DSB for an update
20.04.2021
noyb filed our reply with the DSB
12.04.2021
DSB sent us the controllers reply

DSB sent us the controller's reply and set a 2 week deadline to reply.

26.11.2020
Swedish DPA issued a press statement that they are initiating investigations into the complaints
22.09.2020
DSB notified us that the procedure is stayed until establishment of LSA
17.08.2020
Complaint