Re:Use of Google Analytics declared illegal by French data p...
by germanier on Thursday February 10, 2022 @10:33AM
(#30287548)
In general, under the GDPR it doesn't matter much whether you process data yourself on your own server or contract that same task out to a third-party. Either that processing is legal or it isn't - ownership of the server doesn't play a role.
The problem with Google Analytics here is not that it's a third-party but that it's under US control.
But I agree with your conclusion: what matters is how it's being used. In this case - whether you share/sell it to others or not.*
[*] But not only: it also matters if you take adequate care in protecting personally identifiable information or not.