Thank you for sharing. I feel this is the most relevant part:
> As a processor, the second respondent provided the website operator with numerous configuration
options for Google Analytics. On the basis of the information received, it should be noted that the
Respondent configured Google Analytics as stated. Due to a possible configuration error, the
respondent did not activate the IP anonymization function in all cases. Under normal operating
conditions and to the extent that users based in the EU are affected, a web server is located in the
EEA, which is why IP anonymization is generally carried out within the EEA. In the present case,
normal operating conditions were present.
pdf in english: https://noyb.eu/sites/default/files/2022-01/E-DSB%20-%20Goog...