Schleswig-Holstein’s data-protection commissioner, Thilo Weichert, says that an analysis from his office shows that Facebook builds profiles of both users and non-users with data collected by the Like button, reports the Associated Press. If true, this would violate German and European data protection laws.

In a statement, the data-protection organization urged Internet users “to keep their fingers from clicking on social plugins” like the Like button to avoid being profiled.

“We firmly reject any assertion that Facebook is not compliant with EU data protection standards,” a Facebook spokesperson said in another statement. “The Facebook Like button is such a popular feature because people have complete control over how their information is shared through it. For more than a year, the plugin has brought value to many businesses and individuals every day. We will review the materials produced by the ULD [the data protection agency], both on our own behalf and on the behalf of web users throughout Germany.”

According to Facebook, the only information that the company receives when a user who is not signed in hits the Like button is an IP address.

German regulators have clashed with Facebook before. Earlier this month, the data protection supervisor in Hamburg warned that Facebook’s new automatic photo-tagging feature could violate European privacy laws.