EN
TR
One of the most important of changes that Google announced was that Google Ireland…
Also, Google Ireland Limited became the “service provider” responsible for consumer…
“These changes do not in any way alter how our products work or how we collect or process user data within our services. Nothing changes about your current settings and you will continue to have granular control over the data you share with us when you use our services. And of course, we remain fully committed to compliance with the GDPR across all of the services we provide in the European Union.(611)…
In this statement, Google implies that it does not need any changes to be made, neither…
To date, data subjects, regulators and sometimes even app developers and advertisers…
“The GDPR does not aim at regulating technologies per se, but regulates how actors use these technologies in a context involving personal data.”(613)…
Before assessing whether the consent was sufficiently specific and clear (or unambiguous),…
With respect to the unambiguity of the consent, CNIL recalls Recital 32 of the GDPR,…
Finally, CNIL observes, the consent is not sufficiently specific. Indeed, in order…
Consent also needs to be considered before any processing, reading or storing of personal data from or onto the smartphones. All essential elements of valid consent should be present at that time. In a way, valid consent means open consent. Put differently, this can mean to obtain valid consent before installing the app from the app store.(620)…
The methods used for providing information and obtaining end user consent should…
As mentioned in Chapter 2, the principles of data protection by design and by default…
Google continuously tracks the location of its users both on Android and iOS platforms…
Does Google Run Afoul of the GDPR?…
As briefly presented in the previous Chapters, there are some vague explanations,…
To begin with an example, smartphone users who dip into the Account dashboard can…
Google does give a certain degree of control to the user through its Google account system. For example, as of May 1st, 2019, as mentioned Sayfa 196 before, Google now allows the automatic deletion of Location History. Previously, ‘Location History’ could only be manually deleted through the ‘Location Timeline’, and can be exported via the ‘Takeout’ tool.(628) Yet, the data extracted via ‘Takeout’ appears to be more elaborate than what is shown in the ‘Location History’ timeline.(629) As discussed in Chapter 1, location data is personal data, since it falls under the scope of being information that directly or indirectly can identify a natural person.(630) So, Google is collecting personal data when it collects and processes information about a smartphone user’s location and movement through its products and services. Sayfa 197
Figure 7.1: Android Web-based Timeline…
The processing of personal data is lawful only if, and to the extent that, at least…
Furthermore, Norwegian Consumer Council argues that relying on legitimate interest…
Figure 7.2: Android Location History – “Learn More” on Its Benefits For the purposes of the GDPR, consent has to be opt-in. Since ‘Location History’…
“When you turn on Location History, you may see a number of benefits across Google products and services, including personalized maps, recommendations based on places you’ve visited, help finding your phone, real-time traffic updates about your commute, and more useful ads.”(640)…
In this case, consent can be considered a legal ground for processing user’s location…
Figure 7.3: Activity Controls – Web & App Activity – Controls Default ‘On…
As a possible suggestion, Google can inform its users about the reasons it chooses…
Example…
This section aims to provide a short analysis on the methods Google utilises when…
Transparency…
Although ‘transparency’ deserves a chapter itself, since it is highly relevant and…
Consent …
Even companies must take into account a consumer’s expectation of how their data…
The basic concept of consent remains similar to that under the Directive 95/46/EC,…
In Google’s latest Privacy Policy – although this statement was the same in the previous…
It seems that Google gives consent as a legal basis for at least “some” of the collection…
