Questions tagged [gdpr]

Questions about the European Union General Data Protection Regulation (GDPR)

Filter by
Sorted by
Tagged with
0
votes
2answers
54 views

GDPR: can vendors accept core dumps or logs

As a software vendor, am I allowed to accept core dumps or application logs from my customers to investigate a crash or malfunction even though they most likely contain personally identifiable ...
1
vote
2answers
83 views

Is the UUID considered personal data?

I am planning to build a mobile platform which I would use the UUID as the username, and a password of user’s choice. So that users would just need to type a chosen password to use my services. ...
-1
votes
0answers
30 views

GDPR under 18 app

I am planning to set up a platform similar to WhatsApp in which 16-19 year old students are able to connect and call/text each other. I was wondering what sort of regulation will I need to abide or ...
0
votes
1answer
55 views

Must the Privacy Policy be Included In-App, or is a Hyperlink Good Enough?

The title says it: I'm wondering if my company has to have a copy of our app's Privacy Policy included in the actual software package. On the one hand, I could see a copy of the Policy being required,...
0
votes
2answers
58 views

Is storing business data considered personal data?

I want to create an online application. The visitor could enter his website URL then the application will make some analysis. The application asks the visitor if he wants a regular website report on e-...
0
votes
1answer
31 views

Is “Advanced Matching” of Facebook against GDPR?

I am wondering if sharing a hashed email or phone number with facebook with the purpose of matching that hashed value on Facebook's side is against GDPR? https://www.facebook.com/business/help/...
2
votes
1answer
156 views

Accidentally used “to” instead of using “bcc” while sending out email [GDPR violation]

I, as the admin of a small mailing group, used "to" field instead of "bcc" while sending an email to 10 people. One out of the 10 emails turned out to wrong, and of a lawyer, who pointed out that we ...
1
vote
2answers
46 views

Where is the line between transactional vs marketing emails with GDPR?

If a company that offers a product where the user logs in, such as a SAAS product, and they send emails with certain intentions, where is the line drawn between a transactional and a marketing email? ...
1
vote
0answers
32 views

Cookie laws: Do I have to show a banner for technical cookies?

I am aware that technical cookies don't need consent, only marketing cookies need consent. However, if my site only uses functional cookies, do I still have to display a cookie banner that says what ...
3
votes
1answer
45 views

Extraterritorial Scope of Brazil's LGPD

How can a national legislation, like the recent Brazil's LGPD apply to companies which are not established in Brazil, but may offer services to Brazilian citizens via the Internet? Imagine a website (...
52
votes
4answers
19k views

Does GDPR include UK customers, or not anymore?

Now that Brexit happened, does GDPR include UK customers, or not anymore?
-1
votes
0answers
28 views

GDPR compliant analytics if server doesn't store data

I'm currently trying to plan a GDPR-compliant analytics app. Does it comply with the GDPR if I send an unique ID to a server but doesn't store that unique ID? Instead it is hashed together with some ...
0
votes
0answers
19 views

Does my personal website GDPR compliant? [duplicate]

I made a basic chat website. Shows active users with nicknames or if not given nickname, random given name. There is no register or login I take users nickname and save it to cookies. Nickname can be ...
0
votes
0answers
15 views

Is a privacy policy required for storing user preferences?

I wanted to use localStorage (which I think technically counts as a cookie) to store a user's preferences in a simple web app. The stored data doesn't identify the user and is never sent to any sort ...
0
votes
0answers
19 views

Handling of names, emails, phone numbers and messages submitted through website forms under GDPR

I am developing a website for a one-man, Swedish, acupressure company. The site contains a contact form that requires the user to submit a name, email and message. It also contains a booking form that ...
0
votes
2answers
156 views

Institution can access my email (inbox/sent items/etc) and edit it?

First of all, I have thoroughly read the answers to the following questions and none of them answer my queries: Can Google Chrome read/scan my ProtonMail inbox page? Can my IT department read my ...
4
votes
3answers
198 views

Do I have a “legitimate interest” under GDPR to not delete data my software needs to fulfil its function?

The GDPR gives users the right to have their stored data deleted. How does the GDPR handle situations where the data controller needs the data to fulfil their obligations to users (specifically by ...
3
votes
1answer
64 views

GDPR - does a unique device identifier count as personal data?

I'm planning to sell my software online. The payment process is handled by a reseller (FastSpring), so the personal data collected (like the buyer's name and e-Mail address) is never stored on my ...
1
vote
0answers
37 views

How does the GDPR differ from national data protection law?

Before the GDPR came into effect, I had to deal with both the German Bundesdatenschutzgesetz and the Italian Codice in materia di dati personali, and recall them having very similar provisions (though ...
1
vote
2answers
60 views

Process IP address without GDPR consent

We are trying to log the location of our visitors, without storing their actual IP address on our servers. To geolocate the IP address, we use an external service, to which we make an API request ...
0
votes
1answer
51 views

Cookie opt-in required on paid-for web-based software-as-a-service application?

Context: We provide a paid-for web-based software-as-a-service application. This application requires users to register an account, and agree to our terms & conditions and privacy policy to be ...
0
votes
2answers
83 views

What should I reply when someone ask about their GDPR information against a cold marketing email?

I recently received an email says "..please send me a GDPR information about all my data you have assigned to this email.." I collect the email address from a public domain (say GitHub) and ...
0
votes
1answer
19 views

GDPR & CCPA compliance involving terms of service violation

If a user writes a comment on a website that gets flagged and removed+archived are we still obligated to delete the user content and/or the association of that comment with the person? According to ...
1
vote
1answer
80 views

Is it possible to create data subject to the GDPR without any involvement by the person in question?

Say I email a colleague, in a professional capacity: I have been thinking about offering John Smith, who currently works at Big Corp, a job John Smith has had no involvement with my organisation. ...
1
vote
0answers
32 views

Company acquired a website with existing users. Is GDPR announcement obligatory?

When company acquires a website with existing registered users - is it obligatory (by GDPR) to send a notification/announcement email about the acquisition?
24
votes
5answers
14k views

Is asking users to waive GDPR compliance a legal way of escaping GDPR data handling requirements?

I have recently come across this part of an app from a well-known US company: Is this a legal way of handling some of the technical obstacles GDPR introduced? Is this a "flexible" interpretation of ...
0
votes
0answers
46 views

Is WhatsApp legally obligated to remove my chat on every device, based on the GDPR? [duplicate]

Dear Law StackExchange community, I'm attempting to get chat history removed with another party dating back a long time ago. I don't want the chats to remain existent on any device whatsoever, so I ...
0
votes
1answer
43 views

Which EU-related jurisdictions in Americas apply the GDPR regulation?

According to some information, a person will need to be a resident in an EU country in order to be protected by the GDPR regulation. Are there jurisdictions in North or South America where residency ...
0
votes
1answer
42 views

Does GDPR disclosure apply to European citizen temporarily in United States?

For some background: the EU "[Data Protection Directive][1]" is a European Union directive which regulates the processing of personal data within the European Union, as explained in [this Wikipedia ...
0
votes
1answer
142 views

Right to be forgotten in US legal system. Practical approach for erasure?

As it commonly known, the right to be forgotten is a fundamental right in the modern informational society. It is the right of an individual to obtain erasure of his personal data from the online and ...
0
votes
0answers
35 views

Data Privacy: Should a user be allowed to change another users profile information?

In a SaaS platform, should users be allowed to change other users profile information (things like Name, Gender, Company they work for etc)? What laws (US & EU) would give guidance either way? ...
1
vote
1answer
66 views

GDPR dilemma: Does a full name contained in a URL constitute PII as stated by Google Analytics?

But wait, it gets better: This full name belongs to person who was interviewed in an article under this URL. https://support.google.com/analytics/answer/7686480?hl=en What Google considers PII: ......
-1
votes
1answer
75 views

My hashed IPV4 was published by an administrator on an anonymous imageboard (EU country)

some days ago it on an anonymous imageboard it was opened by an administrator a thread with a .png showing all my posts on that website, and each posts had my hashed ipv4 attached to it. Since i ...
0
votes
2answers
83 views

Is it illegal to NOT store logs within the UK? (VPN related)

Introduction: I co-run a VPN company. I have a few legal questions since our service has a strict NO-LOG policy enforced. Question: In the UK, it is illegal to store sensitive and private customer ...
4
votes
1answer
85 views

Does the data protection european regulation (GDPR) apply to processing information obtained from business cards and conversations?

I work at a SME. When we meet someone (either a potential customer or a potential partner) at an exhibition, meeting, conference, etc., we usually save that person's contact information and topic of ...
2
votes
1answer
130 views

A website is refusing or failing to remove personal data I've requested removed: is this against GRPR?

I have been a member of a website for 13 years and would like all of my old posts removed. I have contacted their support team however the experience has been dreadful: it look a lot of back and ...
1
vote
1answer
37 views

Can someone enlighten me about the main task of the independent supervision of data protection law

So, as I understand, now every organisation have a qualified person that deals with any data processing tasks and do the personal data gathering according to Data Protection law. But then each country ...
0
votes
1answer
53 views

Which Cookies require consent for GDPR

I use a number of different cookies on my website for tracking and saving preference. I'm very confused about which can and cannot be set with and without consent under GDPR I'm certain I need ...
0
votes
1answer
52 views

Hiding order invoice information, GDPR

I have a software where we can show order invoice information by typing in the order number and buyer email. Now the thing is that I need to hide the sensitive order information like: Name Surname ...
1
vote
2answers
47 views

Is an auto-submitting form GDPR/DPA-compliant?

TL;DR is a form that automatically submits itself, even after the user has closed the window, GDPR-compliant? An organisation I am part of has an online form on their intranet for reporting incidents ...
0
votes
2answers
58 views

Is anonymous analytics data subject to GDPR?

I am reading the definition of "personal data" here https://gdpr-info.eu/issues/personal-data/. My understanding is that GDPR comes into play when information is about personal data. Let's say there ...
1
vote
1answer
58 views

GDPR in a scientific, transborder scenario

Let us assume that a dental clinic, in a country that is not part of EU, is making dental x-rays for its patients, which may or may not be EU citizens. By the law of this country, the clinic is sole ...
1
vote
1answer
61 views

User-solicited personal information beyond consent

What does the GDPR say about personal information provided by a user about themselves, in the case that the service sign-up process and ToS have always asked of the users not to provide personal ...
0
votes
2answers
71 views

GDPR compliance in ads SDK for iOS/Android

I have opened this question in SO, but was suggested to ask here, as the solution might come from a lawyer, rather than developer. I work on a native ads SDK for iOS/Android (banner, interstitial, ...
0
votes
1answer
57 views

GDPR - We're a global company and are expanding to Europe, do we need to save data there?

We're a global company and are expanding to Europe. We have users log in to our service and then they can use it. If a user is from the EU, do we have to store all of their personal information ...
1
vote
1answer
74 views

Can the GDPR be used to ask free race photographs?

A lot of time pictures of participants are taken during a sports event. These are often sold afterwards for e.g. 10 euro each. Some people just share the watermarked image on social media. But my ...
2
votes
3answers
118 views

What an employer can legally ask to monitor about user activity

I work for a Belgian company as systems engineer, and I'm asked by the HR department to give them logs of a specific user's activity. This is about a concern they have when it comes to this user's ...
4
votes
2answers
247 views

Are Blizzard breaking GDPR by charging people for changing their usernames?

I have had an account with Blizzard for several years now. I changed my username (referred to as a battletag) only once, over a year ago. I now want to change it again because searching it on Google ...
3
votes
1answer
254 views

Is it legal for Blizzard to demand a copy of my government id before deleting my account?

I am trying to delete my Blizzard account, however they demand a copy of my government id before doing so. I've seen a somewhat related question about Twitter at How can I get Twitter to delete my ...
1
vote
1answer
99 views

How can I get Twitter to delete my account?

I want to delete my old (7 years unused, never logged in) Twitter account. I lost the email to it, but it has my name so I would like to delete it. I wrote Twitter support twice and told them "This is ...

1 2 3 4 5 10