That's not true. Transfer to third countries is legal, as long as you _properly_ inform people of the risks that it poses, and it's completely voluntary:
> finally, if a transfer of personal data is envisaged to a third country that isn’t the subject of an Adequacy Decision and if appropriate safeguards are absent, a transfer can be made based on a number of derogations for specific situations for example, where an individual has explicitly consented to the proposed transfer after having been provided with all necessary information about the risks associated with the transfer.
GP said: "You are free to share any data with Google that you wish." That is not consistent with GDPR, and that's what I was saying. And the Austrian court has confirmed that.
The court has not said that it's illegal to use GA.
Both takes appear to be missing the entire privacy issue - you are free to share your data with the US if you wish. You are not free to share my data with the US.
GP is correct, they are not free to share "any data", where their right to share "any data" and my right to privacy conflict.
We all love our freedoms - but we have to respect that other people have freedoms too - and we don't have the freedom to take theirs.
> Both takes appear to be missing the entire privacy issue - you are free to share your data with the US if you wish. You are not free to share my data with the US.
That's an interesting way of putting it; you've phrased it in terms of your personal data and the sharer's personal data. But the context is analytics; single datapoints are irrelevant. This is all about sharing data about other people.
Anyway, EU companies are not allowed to even collect data, unless they can justify it. I don't know if that is supposed to also be extra-territorial, so it applies universally (I really hope not).
