26.3.2018   

EN

Official Journal of the European Union

C 112/9

Request for a preliminary ruling from the Bundesgerichtshof (Germany) lodged on 30 November 2017 — Planet49 GmbH v Bundesverband der Verbraucherzentralen und Verbraucherverbände — Verbraucherzentrale Bundesverband e. V.

(Case C-673/17)

(2018/C 112/13)

Language of the case: German

Referring court

Bundesgerichtshof

Parties to the main proceedings

Applicant: Planet49 GmbH

Defendant: Bundesverband der Verbraucherzentralen und Verbraucherverbände — Verbraucherzentrale Bundesverband e. V.

Questions referred

1.

a)

Does it constitute a valid consent within the meaning of Article 5(3) and Article 2(f) of Directive 2002/58/EC (1) in conjunction with Article 2(h) of Directive 95/46/EC (2) if the storage of information, or access to information already stored in the user’s terminal equipment, is permitted by way of a pre-checked checkbox which the user must unselect to refuse his consent?

b)

For the purposes of the application of Article 5(3) and of Article 2(f) of Directive 2002/58/EC in conjunction with Article 2(h) of Directive 95/46/EC, does it make a difference whether the information stored or accessed constitutes personal data?

c)

In the circumstances referred to in Question 1 a), does a valid consent within the meaning of Article 6(1)(a) of Regulation (EU) 2016/679 (3) exist?

2.

What information does the service provider have to give within the scope of the provision of clear and comprehensive information to the user that has to be undertaken in accordance with Article 5(3) of Directive 2002/58/EC? Does this include the duration of the operation of the cookies and the question of whether third parties are given access to the cookies?

(1)  Directive 2002/58/EC of the European Parliament and of the Council of 12 July 2002 concerning the processing of personal data and the protection of privacy in the electronic communications sector (Directive on privacy and electronic communications) (OJ 2002 L 201, p. 37).

(2)  Directive 95/46/EC of the European Parliament and of the Council of 24 October 1995 on the protection of individuals with regard to the processing of personal data and on the free movement of such data (OJ 1995 L 281, p. 31).

(3)  Regulation (EU) 2016/679 of the European Parliament and of the Council of 27 April 2016 on the protection of natural persons with regard to the processing of personal data and on the free movement of such data, and repealing Directive 95/46/EC (General Data Protection Regulation) (OJ 2016 L 119, p. 1).