The verdict [1, Dutch] is somewhat less interesting than it seems since it was a summary proceedings with both lawyers (and the judge) not really versed in GDPR and due to covid quite limited interaction.
The grandmother could have argued legitimate interest (she is a grandmother and took care of one of the children) and have demonstrated limited visibility (now there was no mention of posting publically or not, so the judge went with publically) and the case would have started to get interesting.
Now it was just a slam dunk. No permission, no argument for use case under GDPR, done.
The grandmother could have argued legitimate interest (she is a grandmother and took care of one of the children) and have demonstrated limited visibility (now there was no mention of posting publically or not, so the judge went with publically) and the case would have started to get interesting.
Now it was just a slam dunk. No permission, no argument for use case under GDPR, done.
[1] https://uitspraken.rechtspraak.nl/inziendocument?id=ECLI:NL:...