Questions tagged [gdpr]

Questions about the European Union General Data Protection Regulation (GDPR)

Filter by
Sorted by
Tagged with
0
votes
0answers
22 views

Is Elementor Pro GDPR Compliant?

Elementor Pro (WordPress pagebuilder plugin) uses local storage which cannot be disabled. Something like this: elementor:"{"__expiration":{},"pageViews":5,"sessions":...
0
votes
1answer
23 views

Can internet providers use navigation data for advertising / profiling?

My internet provider knows which sites I am connecting to (even if only the server names, when using https). Can they legally use that information for profiling / advertising? For instance, if they ...
0
votes
1answer
31 views

International Transfers to a Data Subject

A membership organisation based in the EEA receives membership applications from people based outside of the EEA, in countries which do not have an adequacy decision. During the course of the ...
3
votes
1answer
75 views

Removing my personal data ex-employer (RGPD/GPDR ?)

I work and live in France. I worked for a company last year but I quit working there months ago. Since I left, they still have not have removed some data accessible on the internet, like my first name/...
1
vote
1answer
163 views

GDPR - Recording simple page views

We are currently using google analytics to track our site. The issue we now have with GDPR is we don't have a clear picture of our entrance pages. Our landing page data is messed up badly because the ...
0
votes
0answers
74 views

Private messages on social media - GDPR [duplicate]

As the title suggests, if you delete your account on social media/dating websites and there are personal/private chat messages there. Under GDPR, would these have to be deleted by the controller? So ...
1
vote
1answer
165 views

GDPR and a cell phone paid through work?

Company Contacts page From what I understand, the contact information at work is not regulated by GDPR since it is considered B2B. For instance my private email is regulated by GDPR, but my work ...
0
votes
1answer
111 views

How do you obtain evidence for GDPR violations?

What happens when say company EvilkorP sends untrue information and/or information that it is not entitled to share to company Y, and EvilkorP asks company Y to mention some fact about the victim (you)...
0
votes
1answer
77 views

Does my own company also need to be EU-US Privacy Shield certified if we use AWS to store data of European customers?

We're based in United States. We understand that any sub-processor that we use should be EU-US Privacy Shield certified and GDPR compliant. So, we can use AWS and Google Cloud. Both of them are EU-US ...
0
votes
3answers
67 views

Is the user agent string considered personal data?

I have a website. I would like to store the user agent string, current time and opened url (not the IP address or something else) in a database for each page visit to be able to build some statistical ...
1
vote
2answers
47 views

Does the GDPR apply to the data subject's computers?

In this answer to a GDPR question about processing conducted by an app on the user's computer I wrote: The GDPR only applies to data processed by you on your computer. Any processing that happens on ...
1
vote
3answers
82 views

Is offline-only processing a “‘processing” as understood by GDPR?

GDPR, article 4, point (1) states: ‘processing’ means any operation or set of operations which is performed on personal data or on sets of personal data, whether or not by automated means, such as ...
8
votes
2answers
2k views

GDPR & EPR regards maintaining email blacklist

Note a user call YIVI had previously stated that you could store a hash of the users email address to avoid the requirements of General Data Protection Regulation (GDRP) and ePrivacy Directive (EPD). ...
10
votes
2answers
1k views

Do cookie banners need to change for GDPR compliance?

Many sites these days display a "cookie banner" which declares that cookies are being used on the site, generally with a link to a policy document, which state that continued use of the site amounts ...
13
votes
1answer
2k views

Does the German GDPR require storing the data in a German datacenter for a tele-health company?

I co-founded a tele-health startup, we are expanding to Germany, we have gone through the GDPR, and implemented most of it, however, we didn't quite understand the data residency part and found ...
1
vote
1answer
66 views

Is it legal to post an email to social media if the email also contains a photo of the sender and other personal identifiable information?

I've seen a few similar questions asked before, however would posting a screenshot of an email onto social media be legal under the following circumstances: The poster on social media is the ...
0
votes
1answer
111 views

Is it legal to display user airline seat info on a public platform with absolute user consent

Planning a public platform to display user seating info after taking proper user consent , will that still attract legalities if user is ok with it , will it fall under any legal clauses under GDPR ...
1
vote
1answer
82 views

Does sharing a personal text conversation violate GDPR

I engaged in a text conversation over WhatsApp with another person, both of us in the EU, specifically Spain. I would now like to show a section of the texts to a party that would be affected by ...
0
votes
0answers
33 views

Is the Absence of Account deletion possibility legal in Europe? (GDPR)

This website explicitly states there is no easy way to "delete your account". It is accessible from within Europe. How legal is this? What would be my lever to force them to delete my ...
-1
votes
2answers
54 views

GDPR compliance - not an “adequacy decision” country [closed]

Our corporate website's server is located in a country that's considered not an “adequacy decision” country, according to GDPR. I'm aware that GDPR allows that (under certain conditions). It's just I ...
3
votes
1answer
58 views

What is my responsibility related to GDPR as a Freelance developer

I'm a Software Engineer, and I've just taken my first "side gig" job in hopes of becoming Freelance one day. I'm based in the UK. My Client told me exactly what they want, and i've built it. ...
3
votes
1answer
155 views

Are online retailers breaking EU/US law by using user's log-in information to charge different prices without explicitly notifying them?

I am aware that in most places firms are generally allowed to price discriminate, i.e. offer different prices for the same product to different customers based on personal characteristics. For example,...
-6
votes
1answer
101 views

painting of a child [closed]

I live in Europe. My wife's friend has made a painting of my wife and daughter. The painting has been done from a photo, which my wife's friend, the painter, has taken. I did not have any idea about ...
0
votes
1answer
36 views

What is the law regarding web/mobile applications and “personal” data?

I'm developing an application for mobile/web/desktop that will (in very watered down basic terms) store free text strings they've self-contributed and access them freely. As it stands, these ...
6
votes
1answer
104 views

Can a company charge you to update your address under GDPR?

I was just charged £30 (over the phone) to update my address with an insurance company. I didn't contest it at first and pulled out my wallet to pay the fee and did. However, while I was on the phone ...
0
votes
2answers
59 views

Is it illegal to pre-check the email opt-in option for an html form?

Email opt-in and opt-out for online registration forms is subject to GDPR compliance rules. However, I don't see any information out there about whether it is ok for an email opt-in checkbox to be pre-...
0
votes
0answers
47 views

If a user of my site gives me info of a third party they claim to be affiliated with, am I allowed to contact that third party to check?

I am developing an app where a part of the on-boarding process requires users to enter the email / company name of the agency that they are affiliated with (the 3rd party). I need to confirm that they ...
2
votes
4answers
193 views

I live outside of Europe. If I gain e-Residency in Estonia, will I be protected by GDPR regulations?

Are people who gain an Estonian e-Residency treated as a European citizen under upcoming GDPR regulations?
-1
votes
2answers
108 views

As an individual, not a company, if I collect email addresses of visitors to my website, what gdpr regulations apply to me?

I'm planning on making a website to act as a CV / portfolio of my work as a software developer. I intend to lock this personal data behind a token based access system, so that it isn't available ...
0
votes
1answer
34 views

Validity of automated GDPR subject access requests

If a software product was distributed that automated the creation and sending of GDPR subject access requests, do these request impose the same legal requirements on the data processor as if the ...
4
votes
2answers
439 views

GDPR: Is only a birthday personal identifiable information?

I wonder if only a birthday is seen as personal identifiable information according to the GDPR, so no usernames, passwords, emails, phone numbers are present in the system. Literally only a birthdate. ...
1
vote
1answer
49 views

Is storing only part(s) of an IP address compliant with the GDPR?

Let's say that ip address is something like xxx.52.114.191. Would be allowed to store into database 113.191? And let's say address is Nick Example, Some street 5, 33012 Florida, US. Would be allowed ...
0
votes
2answers
114 views

Help figuring out GDPR and pseudonymisation

I have server that needs to identify returning visits from users. I'm trying to figure out what I can do and whether I'm supposed to ask for consent from the user. I don't care who the actual user, ...
-1
votes
2answers
103 views

What legal conditions do I have to meet to open an open source website?

I'm working on a website for a pretty long time and in the close future I want to open it into the public. The problem is, my website collects personal data and cookies which (in my country - Poland) ...
1
vote
0answers
74 views

Is facebook in violation of CCPA if they don't delete all messenger messages when you delete your account?

It seems like Facebook won't delete your messages from the recipient's inbox when you delete your account. People send a lot of personal information in messages including their address, phone number, ...
0
votes
2answers
86 views

Data Scraping public athlete name and performance data. Does this need to be treated as personal data?

Consider the following data for amateur/professional athletes: Athlete name, Athletic event + best performance data e.g.: Joe Bloggs 5k 19:00 10k 40:00 Half Marathon 85:00 other events etc... and ...
-2
votes
2answers
35 views

Storing users data in database, which data is legal to store and how to store it?

I am developing a mobile application that will be pretty similar to Instagram. Now this app will be available for free and I will be offering it on the Stores as an individual not as a business. So ...
0
votes
1answer
99 views

Is the ZIP Code allowed as part of a ordernumber

We have a Webshop and want to have the Customers ZIP Code within our Order Number. Is this against the GDPR?
0
votes
1answer
39 views

Is Google obliged to obtain consent for the processing of searches for anonymous searches under the GDPR?

If you do not register a personal account for Google, thereby not giving specific and informed consent for the processing of your personal data, are Google still obliged to obtain consent for the ...
3
votes
1answer
53 views

Why does Google require consent from users in order to process ads personalization data?

Recently, Google was fined under the GDPR by France's CNIL data protection authority. The authority found Google's processing of personal data for ads personalization lacked transparency, was ...
0
votes
0answers
33 views

GDPR and contact tracing

Alice has a business relationship with Bob, which involves both keeping contact information and enough physical interaction to count as a contact. Charlie contacts Alice and requests Bobs contact ...
1
vote
1answer
60 views

GDPR - Personal data

I've read the definition of "personal data" and I still can't understand it clearly. For example I have a youtube account and create a comment, is this comment now considered my personal data? If that ...
2
votes
1answer
41 views

GDPR/right of erasure and online marketplaces/payment platforms

I am in the early stages of designing an online marketplace platform for professional services. In the context of specifying what happens when a user hits the "delete account" button, I am considering ...
1
vote
0answers
44 views

University diploma / various certificates under GDPR

Background: I'm considering building a web (focused to Europe) which, for one of it's part, would require users to upload their university diplomas and/or other similar certificates of achieved ...
1
vote
2answers
58 views

What consequences are there to ignoring GDPR rules as a non-EU entity?

If a non-EU entity ignores the GDPR rules, including not paying any fines they receive from not following them, what consequences are they subject to? Can a company simply decide to ignore GDPR rules ...
35
votes
2answers
5k views

How to store refusal of cookie consent

If a user refuses cookies on a website, then how can that website store that refusal? As far as I can tell, the GDPR requires you to store both consent to and refusal of personal data storage. But it ...
2
votes
1answer
238 views

GDPR Compliance - Tell EU users not to sign up

I have a client that wants to approach GDPR compliance by simply putting a notice on his subscription forms along the lines of "Don't sign up, Europeans" From what I gather about GDPR compliance, I'm ...
10
votes
2answers
1k views

To comply to GDPR, do social networks require to have a button to “Export your Data”?

Major social web services (such as Facebook, Instagram, Twitter, Microsoft and Google) have a page where you can click a button to export your data - posts, account data, login information, meta data, ...
1
vote
3answers
2k views

What counts as personal data under GDPR?

As a developer of software intended for use by EU citizens, I am committed to complying with the personal data requirements of the forthcoming legislation (EU Regulation 2016/679). There is a ...
0
votes
2answers
37 views

Are LoB apps for internal users required to comply with GDPR for work email addresses used in login?

In Europe, developing Android and iOS Apps, server backend hosted in Azure, on behalf of a customer. The Apps are line-of-business for internal users only, accepting sign-up/login as the work email ...

1
2 3 4 5
11