From the Judgment:
“The reply to the fifth question must therefore be that there is no ‘transfer [of data] to a third country’ within the meaning of Article 25 of Directive 95/46 where an individual in a Member State loads personal data onto an internet page which is stored with his hosting provider which is established in that State or in another Member State, thereby making those data accessible to anyone who connects to the internet, including people in a third country.”
Referenced Authority: Directive 95/46/EC, Article 25
The full text is available at http://curia.europa.eu…