1(2)
This document is an unofficial
translation of the Swedish
Authority for Privacy
Protection’s decision. Only the
Swedish version of the
decision is deemed authentic
Diarienummer: .
IMY-2022-7073 The complainant
Booking.com B.V
Datum:
2023-10-18
Decision under the General Data
Protection Regulation
Decision of the Authority for Privacy Protection
IMY adopts the Dutch Data Protection Authority´s decision in Appendix 1 pursuant to
Article 60(8) of the General Data Protection Regulation (GDPR) and closes the case.
Presentation of the case
On 11 September 2022 the complainant filed his complaint with the Swedish Authority
for Privacy Protection (IMY). On 10 November 2022 IMY sent the complaint to the
Dutch Data Protection Authority as the case concerns cross-border processing and
Booking.com B.V (Booking) has its main establishment in the Netherlands. The Dutch
Data Protection Authority has investigated the matter and issued a decision pursuant
to Article 60(3) GDPR. None of the supervisory authorities concerned has expressed
an objection to the draft decision pursuant to Article 60 (4) GDPR.
Statement of reasons for the decision
The Dutch Data Protection Authority has stated in its draft decision that the
investigation did not disclose any violation of GDPR in this case and that the complaint
has been investigated to the extent appropriate. In light thereof and that none of the
supervisory authorities concerned have expressed an objection to the draft decision
IMY adopts the decision pursuant to Article 60(8) GDPR.
Postadress: The case is therefore closed.
Box 8114
104 20 Stockholm
Webbplats:
www.imy.se
E-post: Appendix
[email protected]
The Dutch Data Protection Authority´s draft decision
Telefon:
08-657 61 00
Integritetsskyddsmyndigheten Diarienummer: IMY-2022-7073 2(2)
Datum: 2023-10-18
How to appeal
If you want to appeal the decision, you should write to the Authority for Privacy
Protection. Indicate in the letter which decision you appeal and the change you
request. The appeal must have been received by the Authority for Privacy Protection
no later than three weeks from the day you received the decision. If the appeal has
been received at the right time, the Authority for Privacy Protection will forward it to the
Administrative Court in Stockholm for review.
You can e-mail the appeal to the Authority for Privacy Protection if it does not contain
any privacy-sensitive personal data or information that may be covered by
confidentiality. The authority’s contact information is shown in the first page of the
decision