This is the key: ...where the latter has the legal means which enable it to identify the data subject with additional data which the internet service provider has about that person