[light_hue_1]

The US parent company was given access to the EU data. That's the problem here.

> A included clauses in the offer that stated, among other things, that it will not access, use, or disclose customer data to any third party, except as necessary to maintain or provide the Services, or as necessary to comply with the law or a valid and binding order of a governmental body.

Of course giving a US company control over EU data at a whim means that it's a transfer to the US. The court made the only reasonable decision.