This applies even when users consent to personalized advertising. The ruling is based on the GDPR's principle of data minimization (Article 5(1)(c)). This decision will likely impact others as well.