03/02/2020
CURIA - Documents
36 Moreover, it is undisputed that that activity of search engines plays a decisive role in the overall
dissemination of those data in that it renders the latter accessible to any internet user making a search
on the basis of the data subject’s name, including to internet users who otherwise would not have found
the web page on which those data are published.
37 Also, the organisation and aggregation of information published on the internet that are effected by
search engines with the aim of facilitating their users’ access to that information may, when users carry
out their search on the basis of an individual’s name, result in them obtaining through the list of results
a structured overview of the information relating to that individual that can be found on the internet
enabling them to establish a more or less detailed profile of the data subject.
38 Inasmuch as the activity of a search engine is therefore liable to affect significantly, and additionally
compared with that of the publishers of websites, the fundamental rights to privacy and to the
protection of personal data, the operator of the search engine as the person determining the purposes
and means of that activity must ensure, within the framework of its responsibilities, powers and
capabilities, that the activity meets the requirements of Directive 95/46 in order that the guarantees laid
down by the directive may have full effect and that effective and complete protection of data subjects,
in particular of their right to privacy, may actually be achieved.
39 Finally, the fact that publishers of websites have the option of indicating to operators of search engines,
by means in particular of exclusion protocols such as ‘robot.txt’ or codes such as ‘noindex’ or
‘noarchive’, that they wish specific information published on their site to be wholly or partially
excluded from the search engines’ automatic indexes does not mean that, if publishers of websites do
not so indicate, the operator of a search engine is released from its responsibility for the processing of
personal data that it carries out in the context of the engine’s activity.
40 That fact does not alter the position that the purposes and means of that processing are determined by
the operator of the search engine. Furthermore, even if that option for publishers of websites were to
mean that they determine the means of that processing jointly with that operator, this finding would not
remove any of the latter’s responsibility as Article 2(d) of Directive 95/46 expressly provides that that
determination may be made ‘alone or jointly with others’.
41 It follows from all the foregoing considerations that the answer to Question 2(a) and (b) is that
Article 2(b) and (d) of Directive 95/46 are to be interpreted as meaning that, first, the activity of a
search engine consisting in finding information published or placed on the internet by third parties,
indexing it automatically, storing it temporarily and, finally, making it available to internet users
according to a particular order of preference must be classified as ‘processing of personal data’ within
the meaning of Article 2(b) when that information contains personal data and, second, the operator of
the search engine must be regarded as the ‘controller’ in respect of that processing, within the meaning
of Article 2(d).
Question 1(a) to (d), concerning the territorial scope of Directive 95/46
42 By Question 1(a) to (d), the referring court seeks to establish whether it is possible to apply the
national legislation transposing Directive 95/46 in circumstances such as those at issue in the main
proceedings.
43 In this respect, the referring court has established the following facts:
– Google Search is offered worldwide through the website ‘www.google.com’. In numerous States,
a local version adapted to the national language exists. The version of Google Search in Spanish
is offered through the website ‘www.google.es’, which has been registered since 16 September
2003. Google Search is one of the most used search engines in Spain.
– Google Search is operated by Google Inc., which is the parent company of the Google Group and
has its seat in the United States.
– Google Search indexes websites throughout the world, including websites located in Spain. The
information indexed by its ‘web crawlers’ or robots, that is to say, computer programmes used to
curia.europa.eu/juris/document/document_print.jsf?doclang=EN&text=&pageIndex=0&part=1&mode=DOC&docid=152065&occ=first&dir=&cid=667631
10/19