{
  "attribution": {
    "source": "legal.exploreworldai.com",
    "canonical": "https://legal.exploreworldai.com/api/public/v1/obj/edge/eu:c-807-21",
    "cite_as": "NovaCopilot, legal.exploreworldai.com (https://legal.exploreworldai.com/api/public/v1/obj/edge/eu:c-807-21)",
    "license": "https://legal.exploreworldai.com/revision",
    "version": "legal-2026-10-23",
    "fingerprint": "ewai:se:2cd911",
    "proof": "sha256:098d8d51e091750ada522e6b7e1bc95210c2d571858db4f8c2850eac1cb60182",
    "jurisdiction": "se",
    "lang": "en",
    "publisher": "NovaCopilot by ExploreWorld Legal",
    "terms": "https://legal.exploreworldai.com/om"
  },
  "brand_source": "Source: NovaCopilot",
  "object_type": "edge",
  "object_id": "edge:eu:c-807-21",
  "schema_version": "1",
  "schema": "https://legal.exploreworldai.com/api/public/v1/schemas/edge",
  "url": "https://legal.exploreworldai.com/api/public/v1/obj/edge/eu:c-807-21",
  "judgment": {
    "id": "eu:c-807-21",
    "text": "https://legal.exploreworldai.com/api/public/v1/judgment-text?id=eu:c-807-21"
  },
  "siblings": {
    "risk": "https://legal.exploreworldai.com/api/public/v1/obj/risk/eu:c-807-21",
    "relation": "https://legal.exploreworldai.com/api/public/v1/obj/relation/eu:c-807-21",
    "change": "https://legal.exploreworldai.com/api/public/v1/obj/change/eu:c-807-21",
    "agent": "https://legal.exploreworldai.com/api/public/v1/obj/agent/eu:c-807-21",
    "provenance": "https://legal.exploreworldai.com/api/public/v1/obj/provenance/eu:c-807-21",
    "status": "https://legal.exploreworldai.com/api/public/v1/obj/status/eu:c-807-21",
    "precedent": "https://legal.exploreworldai.com/api/public/v1/obj/precedent/eu:c-807-21",
    "element": "https://legal.exploreworldai.com/api/public/v1/obj/element/eu:c-807-21",
    "decision": "https://legal.exploreworldai.com/api/public/v1/obj/decision/eu:c-807-21",
    "weight": "https://legal.exploreworldai.com/api/public/v1/obj/weight/eu:c-807-21",
    "conflict": "https://legal.exploreworldai.com/api/public/v1/obj/conflict/eu:c-807-21",
    "citation_graph": "https://legal.exploreworldai.com/api/public/v1/obj/citation_graph/eu:c-807-21"
  },
  "source": "NovaCopilot",
  "precedent_graph": "https://legal.exploreworldai.com/api/public/v1/precedent-graph/eu:c-807-21",
  "item": {
    "judgment": "eu:c-807-21",
    "outgoing": [
      {
        "edge_id": "edge:eu:c-807-21~follows~c-25-17",
        "type": "follows",
        "label_sv": "följer",
        "from": "eu:c-807-21",
        "to": {
          "ref": "C-25/17",
          "id": "eu:c-25-17",
          "url": "https://legal.exploreworldai.com/api/public/v1/obj/precedent/eu:c-25-17"
        },
        "paragraph_ids": [
          "para_231"
        ],
        "excerpt": "Furthermore, the Court has previously held that a natural or legal person who exerts influence over the processing of personal data, for his own purposes, and who participates, as a result, in the determination of the purposes and means of that processing, may be regarded as a controller (see, to th",
        "decided": "2023-12-05",
        "hash": "8f469d9968b8aa496687baed5adef5ed87ce5f2b11beec065c96a0239810749e"
      },
      {
        "edge_id": "edge:eu:c-807-21~follows~c-319-20",
        "type": "follows",
        "label_sv": "följer",
        "from": "eu:c-807-21",
        "to": {
          "ref": "C-319/20",
          "id": "eu:c-319-20-62020cj0319",
          "url": "https://legal.exploreworldai.com/api/public/v1/obj/precedent/eu:c-319-20-62020cj0319"
        },
        "paragraph_ids": [
          "para_229"
        ],
        "excerpt": "The objective of that broad definition in Article 4(7) of the GDPR - which expressly includes legal persons - is, in a manner consistent with the objective of the GDPR, to ensure effective protection of the fundamental rights and freedoms of natural persons and, in particular, to ensure a high level",
        "decided": "2023-12-05",
        "hash": "c97e6e1a3ccaa5361c5f98aff6be6aa8e92383ecb40d57936057cd77fb7fdd30"
      },
      {
        "edge_id": "edge:eu:c-807-21~follows~c-40-17",
        "type": "follows",
        "label_sv": "följer",
        "from": "eu:c-807-21",
        "to": {
          "ref": "C-40/17",
          "id": "eu:c-40-17",
          "url": "https://legal.exploreworldai.com/api/public/v1/obj/precedent/eu:c-40-17"
        },
        "paragraph_ids": [
          "para_229"
        ],
        "excerpt": "The objective of that broad definition in Article 4(7) of the GDPR - which expressly includes legal persons - is, in a manner consistent with the objective of the GDPR, to ensure effective protection of the fundamental rights and freedoms of natural persons and, in particular, to ensure a high level",
        "decided": "2023-12-05",
        "hash": "1a1b47a63af80aa7da830de257c16a9e47c5c9224996eba406dbfd4c87449fc1"
      },
      {
        "edge_id": "edge:eu:c-807-21~follows~c-422-19",
        "type": "follows",
        "label_sv": "följer",
        "from": "eu:c-807-21",
        "to": {
          "ref": "C-422/19",
          "id": "eu:c-422-19",
          "url": "https://legal.exploreworldai.com/api/public/v1/obj/precedent/eu:c-422-19"
        },
        "paragraph_ids": [
          "para_221"
        ],
        "excerpt": "According to settled case-law, the Court does not have jurisdiction to interpret the internal law of a Member State (judgment of 26 January 2021, Hessischer Rundfunk, C-422/19 and C-423/19 , EU:C:2021:63 , paragraph 31 and the case-law cited).",
        "decided": "2023-12-05",
        "hash": "fd9c106df78b2337390fcccd0a6bdaf709b8ec4f8fb1b4c2d8aa7378dd52e6a7"
      },
      {
        "edge_id": "edge:eu:c-807-21~follows~c-423-19",
        "type": "follows",
        "label_sv": "följer",
        "from": "eu:c-807-21",
        "to": {
          "ref": "C-423/19",
          "id": null,
          "url": null
        },
        "paragraph_ids": [
          "para_221"
        ],
        "excerpt": "According to settled case-law, the Court does not have jurisdiction to interpret the internal law of a Member State (judgment of 26 January 2021, Hessischer Rundfunk, C-422/19 and C-423/19 , EU:C:2021:63 , paragraph 31 and the case-law cited).",
        "decided": "2023-12-05",
        "hash": "a736ba4554765dee7e977076eef350b63987286f804c75df8adf769e6cfe2029"
      },
      {
        "edge_id": "edge:eu:c-807-21~cites~c-539-10",
        "type": "cites",
        "label_sv": "hänvisar till",
        "from": "eu:c-807-21",
        "to": {
          "ref": "C-539/10",
          "id": null,
          "url": null
        },
        "paragraph_ids": [
          "para_253"
        ],
        "excerpt": "In particular, they must not adopt a measure by which the nature of EU law and the consequences which arise from it are concealed from the persons concerned (judgment of 15 November 2012, Al-Aqsa v Council and Netherlands v Al-Aqsa, C-539/10 P and C-550/10 P , EU:C:2012:711 , paragraphs 86 and 87 an",
        "decided": "2023-12-05",
        "hash": "7dd565d044c42f247c5376ae1072a8b2af1b37cd5681090bb7daaf26d1f237df"
      },
      {
        "edge_id": "edge:eu:c-807-21~cites~c-550-10",
        "type": "cites",
        "label_sv": "hänvisar till",
        "from": "eu:c-807-21",
        "to": {
          "ref": "C-550/10",
          "id": null,
          "url": null
        },
        "paragraph_ids": [
          "para_253"
        ],
        "excerpt": "In particular, they must not adopt a measure by which the nature of EU law and the consequences which arise from it are concealed from the persons concerned (judgment of 15 November 2012, Al-Aqsa v Council and Netherlands v Al-Aqsa, C-539/10 P and C-550/10 P , EU:C:2012:711 , paragraphs 86 and 87 an",
        "decided": "2023-12-05",
        "hash": "65f6842f459b5234e45eadbedec4cd4917da26bfc21dd243d935ee0b0d95b2a1"
      },
      {
        "edge_id": "edge:eu:c-807-21~cites~c-591-16",
        "type": "cites",
        "label_sv": "hänvisar till",
        "from": "eu:c-807-21",
        "to": {
          "ref": "C-591/16",
          "id": null,
          "url": null
        },
        "paragraph_ids": [
          "para_302"
        ],
        "excerpt": "In that regard, it must be clarified, as regards the question whether an infringement has been committed intentionally or negligently and is, therefore, liable to be penalised by an administrative fine pursuant to Article 83 of the GDPR, that a controller can be penalised for conduct falling within ",
        "decided": "2023-12-05",
        "hash": "e0fcdc9f1281e85ab321a79258e55d241cd0364c0091df5cd0f2f435f56bbbd6"
      },
      {
        "edge_id": "edge:eu:c-807-21~cites~c-601-16",
        "type": "cites",
        "label_sv": "hänvisar till",
        "from": "eu:c-807-21",
        "to": {
          "ref": "C-601/16",
          "id": null,
          "url": null
        },
        "paragraph_ids": [
          "para_302"
        ],
        "excerpt": "In that regard, it must be clarified, as regards the question whether an infringement has been committed intentionally or negligently and is, therefore, liable to be penalised by an administrative fine pursuant to Article 83 of the GDPR, that a controller can be penalised for conduct falling within ",
        "decided": "2023-12-05",
        "hash": "cdb15f2f4707e2a4712abf159f521dbe8982746671147a3738441b53e0478264"
      },
      {
        "edge_id": "edge:eu:c-807-21~cites~c-681-11",
        "type": "cites",
        "label_sv": "hänvisar till",
        "from": "eu:c-807-21",
        "to": {
          "ref": "C-681/11",
          "id": null,
          "url": null
        },
        "paragraph_ids": [
          "para_302"
        ],
        "excerpt": "In that regard, it must be clarified, as regards the question whether an infringement has been committed intentionally or negligently and is, therefore, liable to be penalised by an administrative fine pursuant to Article 83 of the GDPR, that a controller can be penalised for conduct falling within ",
        "decided": "2023-12-05",
        "hash": "7965b357b9e88bcd339a0d337de6672109284f6b4366754768a7fa1103e14bc4"
      },
      {
        "edge_id": "edge:eu:c-807-21~cites~c-683-21",
        "type": "cites",
        "label_sv": "hänvisar till",
        "from": "eu:c-807-21",
        "to": {
          "ref": "C-683/21",
          "id": "eu:c-683-21",
          "url": "https://legal.exploreworldai.com/api/public/v1/obj/precedent/eu:c-683-21"
        },
        "paragraph_ids": [
          "para_280"
        ],
        "excerpt": "In that regard, as has been observed in paragraphs 45 and 48 of the present judgment, the substantive conditions which a supervisory authority must satisfy when it imposes an administrative fine on a controller are governed solely by EU law, since those conditions are laid down, in detail and withou",
        "decided": "2023-12-05",
        "hash": "40b174c53478f433fb24372c05a3eb7e52d68b863fef2267cccbfe5be35d65f3"
      },
      {
        "edge_id": "edge:eu:c-807-21~cites~c-882-19",
        "type": "cites",
        "label_sv": "hänvisar till",
        "from": "eu:c-807-21",
        "to": {
          "ref": "C-882/19",
          "id": "eu:c-882-19-62019cj0882",
          "url": "https://legal.exploreworldai.com/api/public/v1/obj/precedent/eu:c-882-19-62019cj0882"
        },
        "paragraph_ids": [
          "para_261"
        ],
        "excerpt": "That economic unit consists of a unitary organisation of personal, tangible and intangible elements which pursues a specific economic aim on a long-term basis (judgment of 6 October 2021, Sumal, C-882/19 , EU:C:2021:800 , paragraph 41 and the case-law cited).",
        "decided": "2023-12-05",
        "hash": "371ba1d5147b00acf995fd2b9ed4f860bdcb7b618d6e1554a23e523a17e4bf4a"
      },
      {
        "edge_id": "edge:eu:c-807-21~cites~c-94-15",
        "type": "cites",
        "label_sv": "hänvisar till",
        "from": "eu:c-807-21",
        "to": {
          "ref": "C-94/15",
          "id": null,
          "url": null
        },
        "paragraph_ids": [
          "para_304"
        ],
        "excerpt": "Where the controller is a legal person, it should also be clarified that for Article 83 GDPR to apply, it is not necessary for there to have been action by or even knowledge on the part of the management body of that legal person (see, by analogy, judgments of 7 June 1983, Musique Diffusion français",
        "decided": "2023-12-05",
        "hash": "eaf518ae3826e03dd87bacb7109401630e316cc618ab962f7e0b2a91d9ed2d07"
      }
    ],
    "incoming": [
      {
        "edge_id": "edge:eu:c-231-22-62022cj0231~follows~c-807-21",
        "type": "follows",
        "label_sv": "följer",
        "from": "eu:c-231-22-62022cj0231",
        "from_url": "https://legal.exploreworldai.com/api/public/v1/obj/precedent/eu:c-231-22-62022cj0231",
        "paragraph_ids": [
          "para_143"
        ],
        "excerpt": "In that regard, it should be borne in mind that, according to the case-law of the Court, that provision is intended to ensure, through a broad definition of the concept of ‘controller’, effective and complete protection of data subjects (see, to that effect, judgments of 5 December 2023, Nacionalini"
      },
      {
        "edge_id": "edge:eu:c-291-24-62024cj0291~cites~c-807-21",
        "type": "cites",
        "label_sv": "hänvisar till",
        "from": "eu:c-291-24-62024cj0291",
        "from_url": "https://legal.exploreworldai.com/api/public/v1/obj/precedent/eu:c-291-24-62024cj0291",
        "paragraph_ids": [
          "para_122",
          "para_139"
        ],
        "excerpt": "21 Lastly, that court states that the case-law resulting from the judgment of 5 December 2023, Deutsche Wohnen (C-807/21, EU:C:2023:950) - in which the Court held that Article 58(2) and Article 83(1) to (6) of Regulation 2016/679 must be interpreted as precluding national legislation under which an "
      },
      {
        "edge_id": "edge:eu:c-383-23~follows~c-807-21",
        "type": "follows",
        "label_sv": "följer",
        "from": "eu:c-383-23",
        "from_url": "https://legal.exploreworldai.com/api/public/v1/obj/precedent/eu:c-383-23",
        "paragraph_ids": [
          "para_113",
          "para_115",
          "para_117",
          "para_119",
          "para_121",
          "para_123",
          "para_135"
        ],
        "excerpt": "In order to assess those conditions, it is necessary to take account of whether that person forms part of an undertaking, within the meaning of Articles 101 and 102 TFEU (see, to that effect, judgment of 5 December 2023, Deutsche Wohnen, C-807/21 , EU:C:2023:950 , paragraph 58 )."
      },
      {
        "edge_id": "edge:eu:c-538-22-62022cj0538~follows~c-807-21",
        "type": "follows",
        "label_sv": "följer",
        "from": "eu:c-538-22-62022cj0538",
        "from_url": "https://legal.exploreworldai.com/api/public/v1/obj/precedent/eu:c-538-22-62022cj0538",
        "paragraph_ids": [
          "para_202"
        ],
        "excerpt": "According to settled case-law, the Court does not have jurisdiction to interpret the internal law of a Member State (judgment of 5 December 2023, Deutsche Wohnen, C-807/21 , EU:C:2023:950 , paragraph 36 and the case-law cited)."
      },
      {
        "edge_id": "edge:eu:c-612-23~follows~c-807-21",
        "type": "follows",
        "label_sv": "följer",
        "from": "eu:c-612-23",
        "from_url": "https://legal.exploreworldai.com/api/public/v1/obj/precedent/eu:c-612-23",
        "paragraph_ids": [
          "para_121"
        ],
        "excerpt": "According to settled case-law, the Court does not have jurisdiction to interpret the internal law of a Member State (judgment of 5 December 2023, Deutsche Wohnen, C-807/21 , EU:C:2023:950 , paragraph 36 and the case-law cited)."
      },
      {
        "edge_id": "edge:eu:c-638-23-62023cj0638~follows~c-807-21",
        "type": "follows",
        "label_sv": "följer",
        "from": "eu:c-638-23-62023cj0638",
        "from_url": "https://legal.exploreworldai.com/api/public/v1/obj/precedent/eu:c-638-23-62023cj0638",
        "paragraph_ids": [
          "para_155"
        ],
        "excerpt": "It is apparent from the case-law of the Court that that provision is intended to ensure, through a broad definition of the concept of ‘controller’, effective and complete protection of data subjects (see, to that effect, judgments of 5 December 2023, Nacionalinis visuomenės sveikatos centras, C-683/"
      },
      {
        "edge_id": "edge:eu:c-782-22~follows~c-807-21",
        "type": "follows",
        "label_sv": "följer",
        "from": "eu:c-782-22",
        "from_url": "https://legal.exploreworldai.com/api/public/v1/obj/precedent/eu:c-782-22",
        "paragraph_ids": [
          "para_110"
        ],
        "excerpt": "According to settled case-law, the Court does not have jurisdiction to interpret the internal law of a Member State (see, to that effect, judgment of 5 December 2023, Deutsche Wohnen, C-807/21 , EU:C:2023:950 , paragraph 36 and the case-law cited)."
      }
    ],
    "acts": [],
    "counts": {
      "outgoing": 13,
      "incoming": 7,
      "acts": 0
    },
    "follow": "https://legal.exploreworldai.com/api/public/v1/obj/edge/eu:c-807-21?follow=5",
    "hash": "052a60cd7856aaa21b61d3852283d43bef714c6e5848df3ba4ca09fcc7775f4b"
  },
  "links": {
    "provisions": null,
    "case_law": {
      "precedent": "https://legal.exploreworldai.com/api/public/v1/obj/precedent/eu:c-807-21",
      "conflict": "https://legal.exploreworldai.com/api/public/v1/obj/conflict/eu:c-807-21",
      "citation_graph": "https://legal.exploreworldai.com/api/public/v1/obj/citation_graph/eu:c-807-21",
      "weight": "https://legal.exploreworldai.com/api/public/v1/obj/weight/eu:c-807-21"
    },
    "compact": "https://legal.exploreworldai.com/api/public/v1/obj/edge/eu:c-807-21?view=compact",
    "representations": {
      "sv": "https://legal.exploreworldai.com/eu/praxis/c-807-21",
      "en": "https://legal.exploreworldai.com/en/eu/praxis/c-807-21"
    },
    "machine_languages": [
      "en",
      "sv"
    ],
    "ref": "eu:c-807-21"
  },
  "watch": {
    "changes": "https://legal.exploreworldai.com/api/public/v1/changes",
    "whats_new": "https://legal.exploreworldai.com/api/public/v1/whats-new?jurisdiction=eu",
    "conditional": "Send If-None-Match with the ETag; unchanged objects return 304 without body.",
    "recheck_after_seconds": 86400
  },
  "metadata": {
    "schema": "novacopilot_object_metadata/1",
    "canonical_url": "https://legal.exploreworldai.com/api/public/v1/obj/edge/eu:c-807-21",
    "source": "Source: NovaCopilot",
    "official_source": null,
    "short_answer": null,
    "short_answer_status": "not_in_register",
    "hash": "052a60cd7856aaa21b61d3852283d43bef714c6e5848df3ba4ca09fcc7775f4b",
    "schema_version": "1",
    "last_verified_at": null,
    "verification_status": "not_verified_yet",
    "integrity_check_scope": "stored_content_only"
  },
  "hash": "sha256:098d8d51e091750ada522e6b7e1bc95210c2d571858db4f8c2850eac1cb60182",
  "version": "legal-2026-10-23",
  "expires": "2026-10-24T00:00:00.000Z",
  "dependency": {
    "index_version": "legal-2026-10-23+legal-2026-10-23+2026-10-23T10:36:22",
    "content_hash": "sha256:098d8d51e091750ada522e6b7e1bc95210c2d571858db4f8c2850eac1cb60182",
    "revalidate_after": "2026-10-23T15:21:25.843Z",
    "max_copy_age_seconds": 3600,
    "policy": "revalidate-required; attribution-preferred",
    "changelog": "https://legal.exploreworldai.com/api/public/v1/dependency",
    "verify": "https://legal.exploreworldai.com/api/public/v1/verify",
    "stale_copy_invalid": true
  },
  "canonical": "https://legal.exploreworldai.com/api/public/v1/obj/edge/eu:c-807-21",
  "disclaimer": "Source reference with official identifier. Not legal advice and not a compliance decision.",
  "content_notice": {
    "legal_advice": false,
    "nature": "Source register. Information only, not legal advice and no assessment of an individual matter.",
    "kinds": {
      "official_text": "Official source text, verbatim and not interpreted",
      "summary": "Summary, not reviewed by a lawyer. Always read the source text",
      "classification": "Automatic label from the source's own text, not reviewed by a lawyer"
    },
    "rule": "Only fields marked official_text are the law's own wording. Everything else points to it.",
    "report_error": "https://legal.exploreworldai.com/api/public/v1/corrections",
    "ai_act_declaration": "https://legal.exploreworldai.com/api/public/v1/ai-act-declaration"
  },
  "usageInfo": "https://legal.exploreworldai.com/citering",
  "withheld": {
    "links.evidence": 3
  },
  "access": {
    "status": "partner_key_required",
    "header": "x-partner-key",
    "contact": "https://legal.exploreworldai.com/kontakt",
    "note": "Facts and counts are public. Relationships and decision paths stay inside NovaCopilot."
  },
  "access_class": "relationship",
  "access_view": "public"
}