Interessant in beide besluiten is deze (op kleine spellingsvariaties en benoeming van de bedrijven na dezelfde) tekst: The CNIL is materially competent to verify and sanction operations related to cookies deposited by [the company/companies] on the terminals of Internet users located in France. The cooperation mechanism provided for by the GDPR (the "one-stop shop" procedure) is not intended to apply in these procedures insofar as operations related to the use of cookies fall within the scope of the "ePrivacy" directive, transposed in Article 82 of the French Data Protection Act. The restricted committee considered that the CNIL is also territorially competent pursuant to Article 3 of the French Data Protection Act because the use of cookies is carried out within the "framework of the activities" of [Facebook/Google] on French territory. De genoemde "one-stop shop"-procedure van de AVG bepaalt dat een bedrijf de privacywaakhond in het land van hun Europese hoofdvestiging als aanspreekpunt heeft, en dat ...