Is it Case 128: Third-party cookies are used for advertising? It is not only cookies (also web beacons) and not just for advertising.
Is it Case 216: Your personal data is used for advertising? It’s not only advertising and it’s not the first party that does the data collection (as in the case description). The same can be said for cases 487 and 220, as the third parties are the one collecting the data themselves.
I think this point is a bad one, as it relays responsibility on the user to read even more privacy policies from other partners (they don’t do any verification themselves about how well their partners respect their users’ privacy). But I can’t find a suitable case for it. Should I try submitting a new case?