Questions tagged [gdpr]
Questions about the European Union General Data Protection Regulation (GDPR)
242 questions
0
votes
0answers
24 views
Modify a client file
After the setup of the GDPR law about personnal data security, I have a case I'm not sure about.
Test case: I receive an addresses file from a client containing x lines of addresses with personnal ...
1
vote
0answers
25 views
How does GDPR affect communications by email, telephone, or letter between fans and artists?
I'm a science fiction writer and run an author website that lists my works and tells my readers a little bit about myself. There is also a contact page that gives
my email address
my telephone number,...
1
vote
0answers
27 views
GDPR compliance for software that lets users store PII of other people
Most times you see GDPR it relates to the first party storing data about their users, customers, whatever. I'm a developer for some hosted software (SaaS if you will) that allows —as a very tangential ...
2
votes
0answers
39 views
+50
A website monitoring their own users is considered to be monitoring individual's behavior on internet on a large scale?
One of the questions in the "Test" provided by ICO, to check whether a DPO (Data Protection Officer) is required or not, is:
Do your organisation's core activities require regular and systematic
...
0
votes
0answers
15 views
+50
Hold Special Category in database and optionally displays on Profile page - is DPO required?
Say a Social website (not a dating website, but a website similar to Twitter) has an option in the Profile customization where the user can select their sexual orientation.
This is an optional field (...
0
votes
1answer
22 views
How can GDPR affect user generated content?
I'm wondering where the lines of GDPR are in regard to user generated content and how it meets the Communications Decency Act.
Section 230 has been what ISPs and websites (Yelp as an example) use as ...
1
vote
2answers
56 views
Deliberately inaccurate data
The GDPR seem to assume that the client would want us to maintain accurate data. Article 5(1)(d) makes it clear we have to correct inaccurate data.
But I deliver pizzas for a big chain, and I ...
4
votes
1answer
72 views
Do I have to provide proof of citizenship - GDPR
Recently, I've been going through some old accounts of mine (on online websites) and I started deleting them. Thanks to GDPR, this is now much easier.
Most companies' customer services have no ...
0
votes
1answer
31 views
Identity of the controller (GDPR): can any website now ever be anonymous?
No matter whether a website collects personal data or not, it seems that a privacy policy is required anyway, and such a policy should contain (citing article 13 of the GDPR, first paragraph):
(a) ...
1
vote
1answer
28 views
GDPR Article 13.4 - how do you know that the data subject already has the information?
Article 13.1 states:
Where personal data relating to a data subject are collected from the data subject, the controller shall, at the time when personal data are obtained, provide the data subject ...
1
vote
0answers
19 views
GDPR - website with no cookies, no analytics, no private data collection
I'm building a website right now and I'm little bit concerned about GDPR and I hope you can help me out.
So, the website will be a blog with posts, product reviews and some affiliate links, I plan to ...
2
votes
1answer
45 views
GDPR and locked content, legal or not?
We are at the point where we want to launch a web application. The application requires the visitor to create a free account to explore the website. So already at the beginning, they need to create ...
1
vote
1answer
52 views
Does the GDPR law apply to my hobby-site?
I'm the owner of a website that maintains statistics about crew-members of an other site. The statistics about the crew-members are as follows:
Username (on that other website)
User ID (on that other ...
0
votes
1answer
45 views
GDPR - Recording simple page views
We are currently using google analytics to track our site.
The issue we now have with GDPR is we don't have a clear picture of our entrance pages. Our landing page data is messed up badly because the ...
0
votes
1answer
41 views
GDPR - is user social ID personal data
1) Is Google or Facebook user ID number considered personal data? The ID itself is just a number, but you can use it to construct a profile url and reveal his identity through Google or Facebook ...
2
votes
1answer
44 views
Can a user request the deletion of their IP address that is stored for moderation purposes?
An Internet forum logs their users' IP addresses for moderation purposes (fighting abusive sockpuppetry, temporary banning a dynamic IP address range in case of a spam attack, permanently banning ...
1
vote
1answer
59 views
Does a user have the right to request their forum posts deleted?
Forum posts and similar stuff: chat messages from chatlogs, etc.
According to https://eugdprcompliant.com/personal-data/ , a person's social media accounts and their posts there are considered ...
1
vote
1answer
76 views
My email has been shared with other parties
I am in the process of searching for a new job and I have applied for a few.
Today I received an email from HR representative of one of the companies saying that I was not called for an interview ...
1
vote
2answers
54 views
Is GDPR really needed if my android app doesn't collect any personal data?
I have developed some Android applications, and they don't store any personal data, but they do some calculation about some input, for example the annual salary provided by user and return to him a ...
0
votes
1answer
65 views
GDPR: if a user doesn't agree cookies on my banner, what must I do?
if a guest of my site click on "Not agree" on cookie banner, what must I do?
Have I to disable all the cookies?
Have I to disable all the cookies except technical cookies (eg. login session cookies)?
...
0
votes
1answer
26 views
GDPR: cookie for login management
I use cookie in my site for login management.
I user logs in the cookie dies with the sessione, if user flags "Keep me logged in" when logging in a long time cookie persists.
In the long time cookie I ...
0
votes
0answers
15 views
GDPR: what I must store in DB for guest disclaimer acceptance [duplicate]
I'm trying to update my web site about GDPR (privacy European low).
I read some articles about and I hunderstood that I have to store in DB avery discaimer acceptance (Agree/Not agree), for minimum ...
0
votes
0answers
45 views
Is WhatsApp compliant with GDPR
GDPR requires companies to export users' data on request. WhatsApp is not currently offering users any way to export their data (other than manually copying every single chat).
They have a data ...
0
votes
1answer
59 views
Hetzner is trying to charge me for Bandwidth overuse and will not respond when I use the contact form
A few months ago, I was using Hetzner Cloud for my VPS, and they blocked a server because someone seems to have DDoSed it. I requested it to be unblocked, and they ignored me. I also noticed they are ...
2
votes
1answer
21 views
GDPR and Storing Non-EU Citizen Data as an EU-based company
I work for an EU company based in the UK and often work with clients in China and Africa (and some other non-EU countries). In the future, it may arise that we will be storing some personal ...
0
votes
0answers
50 views
GDPR: Is it legal to use publicly available user pictures without thier consent?
Background
Firstly, I will give a little bit of a background: we are developing software (for university project) that will, by taking a picture of a person on the street, recognize them and display ...
2
votes
1answer
55 views
Can a company charge a fee for erasure under GDPR?
Suppose a company has a mailing list to reach out to potential customers. They send both physical and electronic mail. One EU-based potential customer does not want to receive mail anymore and ...
1
vote
1answer
32 views
Crawling a web forum and presenting the posts in a search
Is what this site is doing with steam community legal? https://www.steamtrades.com/
I assume that is a grey area, no? So what are the factors that would make it legal or not? I assume one should not ...
1
vote
1answer
86 views
Is it reasonable to ask me to change my email address after it was leaked?
My child's school recently sent an email with many parents Cc'd instead of Bcc'd. There was nothing sensitive about the email - it just leaked the email addresses of the other parents. They later ...
4
votes
1answer
53 views
GDPR and personal data that gets crawled and ends up on other websites
Data controllers must delete the users' personal data if they are asked to do so, according to the GDPR, except in some cases that don't really apply here. But what if that personal data has ended up ...
1
vote
1answer
36 views
What is exactly a joint controller in GDPR? Examples
I am not sure I really understand the concept of "joint controllers" in GDPR, and I'd like to have some concrete examples, especially examples of joint controllers relating to the internet (websites, ...
1
vote
1answer
25 views
Who is the Controller and who is the Processor if Company X hosts/embeds content of Company Y
Let's say we have two companies "WeServe" and "OurContent" and the following relationships, who is the Controller and who is the Processor or are they Joint Controllers (Art. 26 GDPR) or is there ...
1
vote
1answer
46 views
GDPR and hotlinked images: are they allowed?
By opening this question, you have automatically sent some data to some random website on the internet, the website hosting the above picture. What data? This is the data that is usually sent:
Your ...
2
votes
1answer
43 views
GDPR and Homebrew analytics
Homebrew is collecting anonymous GA analytics by default. User have this information during installation of this package manager. To opt-out you need go to the web page and choise a way to opt-out (...
7
votes
2answers
121 views
Does GDPR Prohibit Reading Unsolicited Emails?
I originally asked this question on Information Security and it was suggested it was a better fit over here.
I'm a member of the management committee of an allotment society in the UK. The committee ...
2
votes
0answers
40 views
How to fulfill the General Data Protection Regulation (GDPR) in science
Suppose, a scientist is planning to publish a paper that is about an algorithm which analyzes Wikipedia articles. I'm wondering, if the European General Data Protection Regulation would be relevant in ...
3
votes
0answers
49 views
How to fulfill the General Data Protection Regulation (GDPR) when citing
I have a question about the European General Data Protection Regulation.
According to Article 13, one has to inform anyone whose personal data is collected:
Where personal data relating to a ...
0
votes
1answer
29 views
How does GDPR affect a personal web application that uses third parties to authenticate?
I created a publicly accessible web application that allows me to remotely control the heating system in my home.
The only data the app itself collects is logs of user activity (e.g.: logging when I ...
1
vote
1answer
54 views
How to fulfill the General Data Protection Regulation (GDPR) when receiving emails
Suppose, a scientist is planning to publish a paper, and his email address will be printed on it. I'm wondering, if the European General Data Protection Regulation would be relevant in that case.
...
5
votes
0answers
48 views
Under GDPR right of access, do I have the right to receive a copy of scoring sheets / evaluation forms after a structured job interview?
Under the GDPR right of access, what rights do I have to employer assessment of myself in the role of a job applicant after a structured job interview? Presumably, in a structured job interview ...
0
votes
1answer
126 views
Is it legal for me to use publicly accessible user data about a person on my website?
I run a wiki service and I was wondering if someone doxes an anonymous person in the from of a dump (pastebin, screenshots, recordings etc), can we keep that data or perhaps cite it?
For instance if ...
0
votes
0answers
25 views
Is Cookie policy needed for navigation cookies?
I have an app that only uses cookies for navigation and for session variables, nothing to get tracked or to share data with other sites.
I also use a cookie for permanent login that expires after 5 ...
0
votes
0answers
32 views
Blockchain off-chain solutions
Would a blockchain that uses off-chain solutions hold no personal data on-chain?
Guy Zyskind, for example, saw an opportunity in solving the blockchain’s scalability and privacy issues from the ...
1
vote
0answers
34 views
Derogation for small companies in GDPR
Question What does Recital 13 in GDPR make exempt? refers to Article 30 on the technical definition on record keeping.
But I am interested in another aspect of this sentence:
To take account of ...
3
votes
1answer
74 views
Is email verification for account creation in violation of GDPR?
Is email verification for account creation in violation of GDPR?
I am creating a new website, and my account creation is incredibly simple, consisting of username, password (stored as hash), and ...
0
votes
0answers
36 views
Redaction rather than Erasure
A colleague has asserted that GDPR gives the customer a right to demand "Redaction but not Erasure".
i.e. I have to ensure that their details and presence on the system are not displayed anywhere, ...
-3
votes
3answers
72 views
GDPR on employee data
I am making a web-based project management tool that stores employee salaries.
What are the implications with GDPR to store this info?
Do we need consent from them?
4
votes
1answer
46 views
Responding to GDPR Article 15 requests if all data is already accessible via website
So, Article 15 of the GDPR gives the user the right to access all the personal data concerning him or her.
Assume we have a website with user accounts. We store some information that is regarded as ...
0
votes
0answers
24 views
GDPR and Publishing Usernames
GDPR states that usernames are personally identifiable information as they are tied to user accounts (i.e., there's a row of personally identifiable data in a database and the username is on that row, ...
8
votes
2answers
214 views
Facebook vs GDPR - Private Messages I sent to others will never be deleted/erased from Facebook servers
I asked this question to Facebook:
I would like to know how can I permanently delete private messages
from both sides of the conversation. For example, conversations I had
in the past with ...
