With Natascha Gerlach, Andrea Mantovani
As noted above, the CJEU applied provisions of Directive 95/46/EC, which has been replaced by the GDPR as of May 25, 2018.