Questions tagged [gdpr]
Questions about the European Union General Data Protection Regulation (GDPR)
672
questions
0
votes
1answer
39 views
What laws should I be aware of if I were to start a business scraping profile content from a website and using this content to build another website?
The idea is to build websites for people (in the UK (at least to start with)) using content that they have uploaded to another website. I will cold-call them, ask them if they would like a website and ...
0
votes
1answer
67 views
Legal obligations of a company in case of GDPR-related vulnerability
First of all I would like to state that my question occurs in a context of EU laws and EU citizen.
I found a vulnerability in a product distributed in a few companies of EU countries. This ...
1
vote
2answers
74 views
Privacy and GDPR on Facebook
I have a doubt regarding the privacy on Facebook and the law application.
Also lawyers That I have spoken with, seem not very sure about the matter.
In particular I would like to know if it is my ...
3
votes
2answers
797 views
If a company actively and knowingly displays user passwords to their staff, is it breaking GDPR laws?
I used to work for a company, where they have a team of moderators, who actively monitor which accounts are scammers etc. To monitor this they can find links between user accounts via a users password,...
2
votes
1answer
32 views
What are the limits of service provision/PII consent for compliance with GDPR?
Most of the internet business model can be described as providing data in exchange for seeing adverts. These adverts are worth a lot more if they can be targeted. The GDPR applies to this, such that ...
1
vote
1answer
56 views
Is it GDPR compliant to hide a competition entry behind a requirement to sign up to a newsletter
I'm looking to run a giveaway competition on my website. The main aim of the competition is to get signups to our email newsletter. I'm therefore proposing that 1. a user signs up to my newsletter (...
0
votes
3answers
120 views
GDPR Disclaimer On Cold Call Emails
I live in the United States. I am helping someone who just started an online store selling tee shirts. In my research to come up with a plan regarding cold call email marketing, I came across GDPR. ...
10
votes
1answer
686 views
What actions to take when a Data Processor doesn't respect GDPR?
We've recently exchanged emails with one of our Data Processors, because they don't grant the ability to permanently delete hosted documents (pdf, png, etc.) on their platform. Such documents might ...
-1
votes
0answers
38 views
What are obligations under GDPR for software licenses? [duplicate]
If a software licence requires acknowledgement of the author does it mean that GDPR will prevent the use of the name of the author for acknowledgment ? How does one delete the author's data if ...
5
votes
1answer
362 views
Do I need to offer a data processing agreement
I recently created a browser extension that allows you to pretty-format a web page and save it in various formats (Word, PDF, etc). I have made it publicly accessible through the browser extension ...
0
votes
1answer
26 views
Can you request response to SAR by web form?
When one makes a GDPR Subject Access Request (SAR), one can specify a particular form of response, for example by email. Also the data can be requested in a structured, commonly used and machine-...
1
vote
1answer
47 views
Does the Data Protection Act 2018 in UK require users of a website to explicitly
Now that Brexit has happened, GDPR no longer takes effect in UK.
However, the Data Protection Act 2018 will continue to apply.
With GDPR's Article 6, a website is required to request explicit consent ...
5
votes
1answer
123 views
GDPR unbelievable legitimate interest. What action to take?
If a website is claiming legitimate interest in data collection in a way that is unbelievable is there any action that a web site visitor can take?
For example, if one was to visit The Daily Mail you ...
3
votes
2answers
70 views
Creative commons attribution and GDPR
When using content released under an open licence such as creative commons, it might be required to provide attribution to the author.
For instance, if I were to use this image from Wikimedia Commons ...
1
vote
1answer
50 views
How far up the chain of internet provision does my GDPR responsibility go?
Say I host a web page on my computer, and you visit that site from somewhere in Europe. The web server on my computer will know your IP address, and I can choose to "forget" it as soon as ...
1
vote
1answer
71 views
Is client-side encrypted data really personal data
Scenario: My service that is storing customer files is hosted on my own personal physical server, “on-prem”. It is then using one of the popular cloud storage services (Azure blob storage, AWS S3) to ...
1
vote
1answer
54 views
Can I sell the GDPR data I requested?
If I request to download my personal data under GDPR, from sites like Google or Facebook, is it legal for me to sell that data?
0
votes
3answers
66 views
GDPR, personal and political activity
The GDPR does not apply to the processing of personal data that is "by a natural person in the course of a purely personal or household activity". I cannot find a description of "...
1
vote
1answer
86 views
Data deleted prior to GDPR access request
A company recieves a request to access personal data. They realize that they got the request two weeks after data collection; by this time all data is deleted. What would a company reply if such ...
2
votes
1answer
86 views
GDPR and Telecom law broken, mobile network operator refuses to disclose user of a phone number
I got today a very unnerving phone call. It was a telemarketing, but unlike any other I had before, this was automated system and it suggested it knew much more about me than my number. I'm talking ...
5
votes
2answers
2k views
Repercussions of defying the Cookie Law
I was wondering what case law is out there on the subject, or, if there is not much, what real repercussions can website owners who defy the Cookie Law expect?
Say Bob is not only pissed off by the ...
1
vote
2answers
68 views
The UK GDPA article 17 right to erasure. Can I retain the person's ID number if it no longer identifies them?
I manage a small relational database for members of a club with about 600 members. The 'member' table has records holding the memberID , their name, address phone etc. The memberID is then used as a ...
-1
votes
1answer
60 views
Who is data controller for automatic communications under GDPR? [closed]
This is how automatic communications infastructure works :
an automatic communications creator registers with an automatic communications service . Users registered with this automatic communication ...
1
vote
1answer
46 views
Saving websites for archiving
I am looking into archiving certain articles of websites (not the whole website or nothing similar) I'm interested in, to keep a personal archive of information I want to have available or that I want ...
2
votes
2answers
107 views
Scraping FB phone numbers
I am an EU citizen who codes. I have a project, which works this way:
program enters a word into Facebook search
program extracts links to the Facebook pages
program scrapes (gather and save) the ...
0
votes
2answers
90 views
GDPR - does it give the right to unnecessarily ask to be removed from a group?
Can the users of a messaging group ask under GDPR the owners of the group remove them? Then rejoin to repeat (it leads to more processing of their data) if the messaging service provides a "leave ...
1
vote
1answer
51 views
Is the creation of a cookie with a anonymous id a violation of GDPR even if it's not used until consent?
We run a website with a global user base and need to respect GDPR compliance for those visitors that the law applies too. Since we are on Shopify we are currently making a front-end request to check ...
1
vote
2answers
64 views
How long can an employer keep financial details after employee has left under GDPR?
I finished a job in 2019, but just received notification of a data breach at that job in 2021, and my bank account number, sort code, national insurance number, full name, address and date of birth ...
1
vote
1answer
133 views
UK Law Question (England): Can I Sue someone if they post a video of me on social media Without my Consent?
Scenario: Someone starts talking to you while they record you without you knowing it. You notice they're recording you and they tell you the video is going on Youtube. You tell them that this is only ...
1
vote
1answer
52 views
GDPR & Privacy Policy for a personal website where the only potential personal data is IP logs
I'm based in the UK, and I am building a personal website (basically an online resume/portfolio) which I have ensured does not collect any personal information (there are no forms, cookies etc.). I do ...
0
votes
1answer
49 views
Should I blur personally identifiable information on Facebook screen recording for YouTube?
(Global question: EU, US, etc)
I'm recording a video for YouTube where I show how browser extension works while surfing through different Facebook Groups, Business Pages, Personal Profiles, etc.
...
0
votes
1answer
48 views
Are Wix.com and WordPress.com GDPR compliant?
When signing up to Wix.com or WordPress.com there is a bundled consent practice which seems to violate Art.7(4).
Note than even no Privacy Policy mentioned in WP.com
https://automattic.com/privacy/
...
2
votes
1answer
29 views
Can I use Facebook Chat Plugin without asking GDPR consent?
My webpage has no analytics because I don't want to show the GDPR consent popup to users. Would I violate GDPR if I integrate the Facebook Chat Plugin without adding the GDPR consent popup?
1
vote
0answers
29 views
GDPR data deletion: can I ask the company to delete the data it had exported in the United States?
I am located in Italy.
I have subscribed to a service and provided some PII that "could be exported in the United States".
If I send a GDPR request to delete my data, can I ask them to also ...
1
vote
0answers
31 views
GDPR data deletion: do I have a right to have the company specify which data it retained and why?
I requested the DPO of a company to delete all my data under GDPR.
After a step of "account ownership" verification, it replied that:
XXXX has deleted all of your personal data except where ...
1
vote
1answer
133 views
I want to be forgotten according to Art. 17 GDPR. What is the correct procedure?
English
I want to send someone a letter:
Dear Sir or Madam,
In accordance with Art.15 GDPR, I ask you to inform me whether you are storing data about me.
If you do this, I ask you (and third parties ...
3
votes
1answer
112 views
Can the GoDaddy Provider refuse to immediately delete parts of my personal data?
English
I am located in Germany.
The issue: GoDaddy refuses to delete parts of my personal data
A few weeks ago I opened an account with the GoDaddy domain provider. The aim was to register a few ...
1
vote
1answer
40 views
How does GDPR affect GMail GeoDNS?
My employer (in the EU, where GDPR applies) uses Google GSuite, and as a result I have a work webmail that I can check at the host mail.google.com. From what I understand, Google uses GeoDNS, i.e., ...
0
votes
1answer
73 views
Can we provide IP address data that might not be the user's data?
We have a user who is being harassed by somebody and on our service, the harasser filled out the user's password reset form.
This created a log entry that essentially says
<Harasser's IP address&...
1
vote
2answers
127 views
Is extracting gender specification by utilising author names from scientific publications GDPR-compliant?
It is clearly stated in the European Commission website that gender is considered as "Personal data" which is "sensitive" and is subject to specific processing conditions.
However, ...
2
votes
2answers
91 views
Do I need “cookie management modal” in my web application?
We have a web application (+1000 users) and we use analytics cookies and have also some cookies that are required for the application to work.
Before the user creates an account, it has to accept both ...
-1
votes
2answers
106 views
Semi-banned from instragram - Rights under GDPR?
I'm mostly out of my depth here and have no knowledge about this. I'll try to make it short and to the point.
I use my instagram account for posting pictures of my vacations and the occasional picture ...
3
votes
1answer
92 views
Can I request to delete an account with a government?
This concerns my student loans repayment account which is managed by the gov.uk website.
I have paid my loan back in full and have had a confirmatory letter stating this as well, as I wanted to ensure ...
2
votes
1answer
93 views
Do lax and lazy cookie messages comply with cookie laws?
On a web page, I received a cookie pop-up that looked like this:
Which reads as:
We use cookies. You probably don't care. Click the button to get rid of this pointless message.
Whatever (the button)
...
1
vote
1answer
45 views
GPDR/ICO registration. Do I need to register? (Their site is inconsistent.)
https://ico.org.uk/for-organisations/guide-to-data-protection/guide-to-the-general-data-protection-regulation-gdpr/data-protection-fee/exemptions/ lists exemptions as:
Staff administration
...
2
votes
1answer
78 views
After the Brexit, can we store UK data in EU region?
Can you please tell me, whether we can store PII data belong to UK in EU region? I know the other way round is illegal. But I could not find a place where this problem address properly. Can you please ...
3
votes
2answers
79 views
Storing IP's and GDPR Compliance
Suppose a web designer plans to store hashed IP's in a database for analytical purposes of tracking unique clicks, and for security purposes to prevent botting unique clicks. Suppose the site only ...
2
votes
1answer
222 views
Are Facebook Pixel GDPR compliant?
GDPR states that a data subject have the right to get a copy of the data about the subject the data controller has collected, and in some cases deletion of said data. If I understand correctly, this ...
2
votes
1answer
75 views
Are businesses required to try every possible combination of methods for verification under GDPR?
A site maintains accounts containing:
email
password
display name
account preferences
Two accounts containing the same password, display name, and account preferences may or may not exist but they ...
6
votes
1answer
2k views
Californian resident travelling in EU - which privacy law applies?
If a Californian resident is travelling within the EU, it seems both European GDPR and Californian CCPA privacy laws will apply.
Sometimes businesses have single privacy emails, so if a deleting ...
