Responding to the request by the German Federal Administrative Court, the Court of Justice of the EU (“CJEU”) gave on 5 June 2018 its preliminary ruling in the proceedings between Schleswig-Holstein’s data protection authority (“ULD”) and a private educational company (“Wirtschaftsakademie”). The judgment, in the case C-210/16, sheds light on who is the data controller […]