Pinterest Europe Ltd
- Complaint filed
- 16.03.2026
- Decision
- 29.04.2026
- Time to decision
- 44 days
- Decision number
2.1-1/26/488-1031-5- GDPR articles
- 12, 15, 17, 57
600a01adb58ee3a21d9cde9242038b869f66b5f74ba7efa88cdc84e5297992c6The document is published in full. The complainant's personal data (email address) has been removed from the document.
Grounds for refusal
- Art. 57(1)(f) — handled "to the appropriate extent"
- the GDPR does not oblige issuing an order
- the lead authority is another country (Art. 56)
What was in the complaint
The initial complaint was filed on 16 March 2026 (accepted), then supplemented.
Account igor_kuzmin_creator, registered on 25 January 2022. The controller is Pinterest Europe Ltd. (Dublin), the lead authority is the DPC of Ireland.
20 March — a technical analysis via Chrome DevTools (Application → Cookies → www.pinterest.com) showed that Pinterest loads at least 15 cookies of Google LLC domains onto the device.
The breach
Undisclosed transfer of data to Google LLC (USA) — Chapter V GDPR, Art. 13(1)(e). Fifteen Google cookies on the Pinterest page, not disclosed as a data transfer to a recipient in a third country.
What AKI decided
Proceedings discontinued. Grounds: Art. 57(1)(f); the lead authority is the DPC of Ireland (Art. 56).
Analysis
Pinterest Europe is established in Ireland — full EU reach. The lead authority under the one-stop-shop is the DPC. But even here, handling on the merits and referral to the lead authority remain AKI’s duty.
The evidence is simple and reproducible: anyone can open F12 on pinterest.com and see the Google cookies. Fifteen of them is not a “technical component” — it is a data transfer to the USA that must be disclosed.