Certified Information Privacy Professional – Europe (CIPP/E) — Question 127

According to the E-Commerce Directive 2000/31/EC, where is the place of “establishment” for a company providing services via an Internet website confirmed by the GDPR?

Answer options

• A. Where the technology supporting the website is located
• B. Where the website is accessed
• C. Where the decisions about processing are made
• D. Where the customer’s Internet service provider is located

Correct answer: C

Explanation

The correct answer is C, as the place of establishment is defined by where the decisions on processing personal data are made, which aligns with GDPR principles. The other options are incorrect because they refer to physical locations or access points that do not determine the legal establishment of the service provider.