Very interesting, but also pretty complicated.

He sued also because of using Cloudfront, but lost that part.

He won because of Login by Facebook. But I assume he must have had an active Facebook account to use that. Wouldn't that be consent? I assume Facebook terms of usage and privacy policy allow transfer to the US.

Can an indivual sue in the EU court of justice? I thought only national courts can send a case there if they feel unsure about how to interpret EU legislation.