¶ ile paragrafa bağlantı verin veya alıntıyı künyesiyle kopyalayın. Üretilen bağlantı kimlikleri resmî paragraf numarası değildir.
CNIL.
3 Place de Fontenoy - 75334 PARIS Cedex 07
T. 01 53 73 22 22 - F. 01 53 73 22 00
www.cnil.fr
# Communication
Date: 25 March 2025 at 17:27
Subject: Closing a complaint
Agent :
Contact :
Text :
Dear Sir
You have lodged a complaint with the Commission Nationale de l'Informatique et des Libertés (CNIL) against regarding use of the "Google Analytics" tool on the website involving the transfer of personal data to the United States.
As is located in the Netherlands, the handling of this case has necessitated cooperation between the CNIL and its European counterparts with regard to any breaches of the General Data Protection Regulation (GDPR), in accordance with the rules set out in this text.
In this case, the CNIL forwarded your complaint to the supervisory authority, the Dutch authority.
Firstly, it is clear from the investigations carried out by the Dutch supervisory authority that did transfer personal data to the United States through the use of Google Analytics services.
Secondly, the Dutch authority states that its investigations have revealed that, since 21 September 2021, GOOGLE LLC has been using standard contractual clauses to govern the transfers made using the solutions it offers.
Lastly, it points out that, since receiving your complaint, the European Commission adopted an adequacy decision on 10 July 2023 finding that the United States provides a level of protection of personal data equivalent to that of European Union. It follows from this decision that organisations subject to the GDPR may now transfer personal data to certified organisations that have undertaken to adhere to this legal framework. On this point, it appears from the investigations carried out by Dutch authority that GOOGLE has indicated that it will adhere to this legal framework from 1 September 2023, and that from that date, the data transfers to the United States referred to in your complaint will in principle comply with the requirements of the RGPD.
In view of the above, I hereby inform you of the Dutch supervisory authority's decision to reject your complaint under Article 60(8) of the GDPR.
Yours sincerely
Subject to applicant's right to bring an action, CNIL decisions may be appealed to the Conseil d'Etat within two months of their notification, increased :
- - one month for residents of Guadeloupe, French Guiana, Martinique, Réunion, Saint Barthélemy, Saint Martin, Mayotte, Saint-Pierre-et-Miquelon, French Polynesia, the Wallis and Futuna Islands, New Caledonia and the French Southern and Antarctic Territories;
- - two months for people living abroad.