CJEU-C-251/21 Meta Platforms and Others v Bundeskartellamt Just a snippet
"Furthermore, the CJEU held that where the user of an online social network visits websites or apps to which one or more of the categories set out in Article 9(1) GDPR relate, the user does not 'manifestly make public', within the meaning of Article 9(2)(e) GDPR, the data relating to those visits collected by the operator of that online social network via cookies or similar storage technologies."
"According to the CJEU, in the absence of the data subject’s consent, the personalised advertising by which Facebook finances its activity, cannot justify the processing of the data at issue as a 'legitimate interest' pursued by Meta pursuant to Article 6(1)(f) GDPR. "