The I. Civil Senate of the Federal Court of Justice, which is responsible among other things for claims under the Injunctions Act, has to rule on the question of what requirements must be met for consent to the storage of cookies on a user’s terminal device.
The plaintiff is the Federal Association of Consumer Organizations.
The defendant organized a sweepstake at its Internet address in September 2013. After entering the zip code, the user was taken to a page where the user’s name and address had to be entered. Below the address entry fields were two checkboxed consent forms.
By confirming the first text, the checkbox of which did not have a preset check mark, the consent to advertising by sponsors and cooperation partners of the defendant by mail, telephone, e-mail or SMS was to be declared. There was the possibility to choose the advertising sponsors and cooperation partners from a linked list of 57 companies. The consent could be revoked at any time according to the notice text.
The second checkbox had a preset check mark and showed the following text:
I agree that the web analytics service Remintrex is used on my site. As a result, the sweepstakes organizer, [Beklagte], sets cookies after registration for the sweepstakes, which enables [die Beklagte] to evaluate my surfing and usage behavior on websites of advertising partners and thus interest-based advertising by Remintrex. I can delete the cookies at any time. Read more here.
In the explanation linked with the word “here” it was pointed out that the cookies would receive a certain randomly generated number (ID) associated with the registration data of the user, who had to enter his name and address in the web form provided. If the user with the stored ID would visit the website of an advertising partner registered for Remintrex, this visit should be recorded as well as which product the user is interested in and whether a contract is concluded.
The preset hook could be removed. However, participation in the competition was only possible if at least one of the two fields was marked with a check mark.
Insofar as relevant in the appeal proceedings, the plaintiff seeks to prohibit the defendant from including or relying on corresponding declarations of consent in sweepstake agreements with consumers. In this context, the request regarding the second text for the declaration of consent also concerns the default setting in the checkbox. The plaintiff also demands compensation for the warning costs.
Previous process history
The Federal Court of Justice suspended the proceedings by order of October 5, 2017 and referred various questions to the Court of Justice of the European Union on the interpretation of Union law regarding the validity of consent to the setting of cookies by means of a pre-set checkbox. The reference for a preliminary ruling concerns Art. 5 para. 3 and Art. 2 lit. f of Directive 2002/58/EC concerning the processing of personal data and the protection of privacy in the electronic communications sector (Directive on privacy and electronic communications) in conjunction with Art. 2 lit. h of Directive 95/46/EC on the protection of individuals with regard to the processing of personal data and on the free movement of such data (Data Protection Directive) and Art. 6 para. 1(a) of Regulation (EU) 2016/679 on the protection of individuals with regard to the processing of personal data, on the free movement of such data and repealing Directive 95/46/EC (the General Data Protection Regulation).
The Court of Justice of the European Union answered these questions in a ruling on October 1, 2019(see this post). The Federal Court of Justice will now continue the oral proceedings in the legal dispute the day after tomorrow.