Questions tagged [gdpr]

Questions about the European Union General Data Protection Regulation (GDPR)

Filter by
Sorted by
Tagged with
0
votes
1answer
202 views

Is an incentivized consent considered freely given in GDPR?

Let's say someone offers you 50 bucks if you opt-in to a consent; would that consent be still considered freely given in the eyes of GDPR (General Data Protection Regulation)? My understanding is ...
0
votes
0answers
34 views

Purpose classification of cookies based on GDPR and ePrivacy [closed]

Although GDPR mentions cookies only in a single recital, several consulting companies (e.g., Cookiepedia or Cookiebot) interpreted it similarly. For the cookie consent, they classify cookies into ...
0
votes
1answer
63 views

Do corporations have any legal liability for XSS exploits that can harvest private/payment info?

So let's say there's a website that is made up of crowd sourced articles (let's say it's about politics). The website has users from around the world. All articles have to be approved by an editor, ...
0
votes
0answers
29 views

Single sign on via cookies and GDPR compliance?

Going to call my two sites "identity provider" and "WordPress site". Flow is: User logs in on identity provider User is redirected to Wordpress site with an SSO token in the URL parameter. SSO token ...
0
votes
0answers
33 views

How does GDPR apply for normal email communication?

I am a member in an association and in charge of membership management and general IT. We exchange information about the work of the association by email using private mailing lists the association ...
0
votes
0answers
14 views

GDPR the other way arround [duplicate]

Let's say that there is a site with a list of people that did one thing. Once with GDPR rules, those people can ask to be removed from that site. I was wondering if that site changes the way it makes ...
0
votes
0answers
12 views

Do you have to provide information about processing personal data for contact persons?

Two companies write a legal agreement between themselves and contain contact details of their representatives in its content. Assuming that these contact details are personal data, are these companies ...
0
votes
0answers
17 views

Does sending email with personal data require agreement with email provider under GDPR? [duplicate]

It's common practice to allow users of your service to get email notifications about interesting events. For example user Joe subscribes to notifications to email address joe@emailprovider.com about ...
0
votes
0answers
25 views

Cause of action for data processor where the data controller neglects to notify supervisory authority

By reading the GDPR I have gathered that a data processor is obligated to notify the data controller of a breach within 72 hours and the data controller is likewise obligated to notify the supervisory ...
0
votes
0answers
29 views

Does right to Data Access request /GDPR supersede restrictions in Employment contract of previous employer

Does right to Data Access request /GDPR supersede restrictions in Employment contract of previous employer ? Is above fundamental right's affected by Clauses in temporary employment contract like '...
0
votes
1answer
48 views

Emails from clients and GDPR

I created a website for a friend's company that has no user account feature, it is only meant to be an online catalog for prices. The only user data we might receive are data that users fill in the ...
0
votes
0answers
26 views

Changes to the privacy policy that require the user's consent: GDPR compliance

Suppose you have an online service, with a privacy policy that the users have accepted. Then at some point you want to introduce some changes to that privacy policy, in a way that requires the user's ...
0
votes
1answer
175 views

Is it legal for me to use publicly accessible user data about a person on my website?

I run a wiki service and I was wondering if someone doxes an anonymous person in the from of a dump (pastebin, screenshots, recordings etc), can we keep that data or perhaps cite it? For instance if ...
0
votes
0answers
24 views

How do platform sites ensure their users do not abuse forwarded user data?

I am asking this question based upon the specific case of open source software sites, but the concept should probably apply equally to other websites that serve as a "platform" for their users to ...
0
votes
1answer
83 views

Under GDPR, does an EU citizen have a right to their American data?

If I have a database with EU citizens on it, but they provide their American data (American address, phone number, email, etc.), am I bound to GDPR?
0
votes
1answer
92 views

GDPR and a cell phone paid through work?

Company Contacts page From what I understand, the contact information at work is not regulated by GDPR since it is considered B2B. For instance my private email is regulated by GDPR, but my work ...
0
votes
2answers
88 views

GDPR - Do we need to give individual mixed personal data of 2 individuals? (Right of access)

Individual is asking for phone recording which contains personal information of that individual and our marketing person, it also contains our sales speech. Do we need to provide copy of phone ...
0
votes
2answers
56 views

GDPR: Transmitting results from secondary to primary care records

In the UK, results of a blood (or other) test taken at a hospital (in secondary care) are stored in the hospital's records but are not automatically forwarded into primary care records (GP records) ...
-1
votes
1answer
37 views

Data anonymization of user idents?

Data anonymization of user idents? I wish I didn't have to since I see little value to it. User idents By user idents I mean such as windows login name, LDAP short names such as "PDIG". These ...
-1
votes
2answers
70 views

GDPR no opt out option

Is it legal if we do not offer an explicit opt-out option in our app for non-persnonal data collection? We planned to explain to the user what data we collect and at the bottom of the screen there ...
-2
votes
1answer
176 views

Google AdWords banned my account. Can I request complete deletion under GDPR?

GDPR introduces a new right to be forgotten, and I no longer consent to Google keeping my data for the sole purpose of maintaining a ban. (Google is keeping my data in order to enforce their ban on ...
-2
votes
0answers
15 views

What are the legal requirement related to storing customer data? [closed]

Can someone list the main points a developer has to consider when storing customer data in a web service with respects to GDPR?
-3
votes
3answers
84 views

GDPR on employee data

I am making a web-based project management tool that stores employee salaries. What are the implications with GDPR to store this info? Do we need consent from them?