Questions tagged [gdpr]

Questions about the European Union General Data Protection Regulation (GDPR)

Filter by
Sorted by
Tagged with
2
votes
1answer
60 views

GDPR Requiring consent to give up privacy

A website that I visited posted the following: “YOUR PRIVACY IS IMPORTANT TO US. New regulations in your country require you to agree to our terms of use agreement and privacy policy before you can ...
1
vote
1answer
71 views

Processing of genetic data: which are the required “technical and organisational measures”?

Several articles of the Regulation require to apply the “appropriate technical and organisational measures” or “appropriate safeguards” in order to ensure the security of data. While GDPR ...
0
votes
3answers
93 views

Is this information considered personal?

Imagine a UK-based company made an application to order food from restaurants. The company decided to share the following information with the restaurants to summarize orders made restaurant location ...
0
votes
1answer
43 views

Modify a client file

After the setup of the GDPR law about personnal data security, I have a case I'm not sure about. Test case: I receive an addresses file from a client containing x lines of addresses with personnal ...
3
votes
1answer
62 views

GDPR compliance for software that lets users store PII of other people

Most times you see GDPR it relates to the first party storing data about their users, customers, whatever. I'm a developer for some hosted software (SaaS if you will) that allows —as a very tangential ...
0
votes
1answer
127 views

How can GDPR affect user generated content?

I'm wondering where the lines of GDPR are in regard to user generated content and how it meets the Communications Decency Act. Section 230 has been what ISPs and websites (Yelp as an example) use as ...
1
vote
2answers
88 views

Deliberately inaccurate data

The GDPR seem to assume that the client would want us to maintain accurate data. Article 5(1)(d) makes it clear we have to correct inaccurate data. But I deliver pizzas for a big chain, and I ...
4
votes
2answers
153 views

Do I have to provide proof of citizenship - GDPR

Recently, I've been going through some old accounts of mine (on online websites) and I started deleting them. Thanks to GDPR, this is now much easier. Most companies' customer services have no ...
0
votes
1answer
55 views

Identity of the controller (GDPR): can any website now ever be anonymous?

No matter whether a website collects personal data or not, it seems that a privacy policy is required anyway, and such a policy should contain (citing article 13 of the GDPR, first paragraph): (a) ...
1
vote
1answer
63 views

GDPR Article 13.4 - how do you know that the data subject already has the information?

Article 13.1 states: Where personal data relating to a data subject are collected from the data subject, the controller shall, at the time when personal data are obtained, provide the data subject ...
2
votes
1answer
70 views

GDPR - website with no cookies, no analytics, no private data collection

I'm building a website right now and I'm little bit concerned about GDPR and I hope you can help me out. So, the website will be a blog with posts, product reviews and some affiliate links, I plan to ...
2
votes
1answer
57 views

GDPR and locked content, legal or not?

We are at the point where we want to launch a web application. The application requires the visitor to create a free account to explore the website. So already at the beginning, they need to create ...
1
vote
1answer
111 views

Does the GDPR law apply to my hobby-site?

I'm the owner of a website that maintains statistics about crew-members of an other site. The statistics about the crew-members are as follows: Username (on that other website) User ID (on that other ...
1
vote
1answer
126 views

GDPR - Recording simple page views

We are currently using google analytics to track our site. The issue we now have with GDPR is we don't have a clear picture of our entrance pages. Our landing page data is messed up badly because the ...
0
votes
1answer
131 views

GDPR - is user social ID personal data

1) Is Google or Facebook user ID number considered personal data? The ID itself is just a number, but you can use it to construct a profile url and reveal his identity through Google or Facebook ...
2
votes
1answer
63 views

Can a user request the deletion of their IP address that is stored for moderation purposes?

An Internet forum logs their users' IP addresses for moderation purposes (fighting abusive sockpuppetry, temporary banning a dynamic IP address range in case of a spam attack, permanently banning ...
3
votes
1answer
468 views

Does a user have the right to request their forum posts deleted?

Forum posts and similar stuff: chat messages from chatlogs, etc. According to https://eugdprcompliant.com/personal-data/ , a person's social media accounts and their posts there are considered ...
2
votes
1answer
104 views

My email has been shared with other parties

I am in the process of searching for a new job and I have applied for a few. Today I received an email from HR representative of one of the companies saying that I was not called for an interview ...
1
vote
2answers
126 views

Is GDPR really needed if my android app doesn't collect any personal data?

I have developed some Android applications, and they don't store any personal data, but they do some calculation about some input, for example the annual salary provided by user and return to him a ...
1
vote
2answers
203 views

GDPR: if a user doesn't agree cookies on my banner, what must I do?

if a guest of my site click on "Not agree" on cookie banner, what must I do? Have I to disable all the cookies? Have I to disable all the cookies except technical cookies (eg. login session cookies)? ...
0
votes
1answer
759 views

GDPR: cookie for login management

I use cookie in my site for login management. I user logs in the cookie dies with the sessione, if user flags "Keep me logged in" when logging in a long time cookie persists. In the long time cookie I ...
0
votes
1answer
156 views

Hetzner is trying to charge me for Bandwidth overuse and will not respond when I use the contact form

A few months ago, I was using Hetzner Cloud for my VPS, and they blocked a server because someone seems to have DDoSed it. I requested it to be unblocked, and they ignored me. I also noticed they are ...
2
votes
1answer
49 views

GDPR and Storing Non-EU Citizen Data as an EU-based company

I work for an EU company based in the UK and often work with clients in China and Africa (and some other non-EU countries). In the future, it may arise that we will be storing some personal ...
2
votes
1answer
84 views

Can a company charge a fee for erasure under GDPR?

Suppose a company has a mailing list to reach out to potential customers. They send both physical and electronic mail. One EU-based potential customer does not want to receive mail anymore and ...
1
vote
1answer
50 views

Crawling a web forum and presenting the posts in a search

Is what this site is doing with steam community legal? https://www.steamtrades.com/ I assume that is a grey area, no? So what are the factors that would make it legal or not? I assume one should not ...
2
votes
1answer
93 views

Can I ask my employer for details held about me?

A company runs a transformation exercise. It asked for employees to fill out answers against questions, which are submitted to a portal and assessed by a number of employees and scored. These scores, ...
1
vote
1answer
143 views

Is it reasonable to ask me to change my email address after it was leaked?

My child's school recently sent an email with many parents Cc'd instead of Bcc'd. There was nothing sensitive about the email - it just leaked the email addresses of the other parents. They later ...
6
votes
1answer
102 views

GDPR and personal data that gets crawled and ends up on other websites

Data controllers must delete the users' personal data if they are asked to do so, according to the GDPR, except in some cases that don't really apply here. But what if that personal data has ended up ...
1
vote
1answer
234 views

What is exactly a joint controller in GDPR? Examples

I am not sure I really understand the concept of "joint controllers" in GDPR, and I'd like to have some concrete examples, especially examples of joint controllers relating to the internet (websites, ...
1
vote
1answer
38 views

Who is the Controller and who is the Processor if Company X hosts/embeds content of Company Y

Let's say we have two companies "WeServe" and "OurContent" and the following relationships, who is the Controller and who is the Processor or are they Joint Controllers (Art. 26 GDPR) or is there ...
3
votes
1answer
151 views

GDPR and hotlinked images: are they allowed?

By opening this question, you have automatically sent some data to some random website on the internet, the website hosting the above picture. What data? This is the data that is usually sent: Your ...
2
votes
1answer
75 views

GDPR and Homebrew analytics

Homebrew is collecting anonymous GA analytics by default. User have this information during installation of this package manager. To opt-out you need go to the web page and choise a way to opt-out (...
8
votes
2answers
164 views

Does GDPR Prohibit Reading Unsolicited Emails?

I originally asked this question on Information Security and it was suggested it was a better fit over here. I'm a member of the management committee of an allotment society in the UK. The committee ...
3
votes
1answer
73 views

How to fulfill the General Data Protection Regulation (GDPR) in science

Suppose, a scientist is planning to publish a paper that is about an algorithm which analyzes Wikipedia articles. I'm wondering, if the European General Data Protection Regulation would be relevant in ...
5
votes
1answer
98 views

How to fulfill the General Data Protection Regulation (GDPR) when citing

I have a question about the European General Data Protection Regulation. According to Article 13, one has to inform anyone whose personal data is collected: Where personal data relating to a ...
0
votes
1answer
51 views

How does GDPR affect a personal web application that uses third parties to authenticate?

I created a publicly accessible web application that allows me to remotely control the heating system in my home. The only data the app itself collects is logs of user activity (e.g.: logging when I ...
1
vote
1answer
83 views

How to fulfill the General Data Protection Regulation (GDPR) when receiving emails

Suppose, a scientist is planning to publish a paper, and his email address will be printed on it. I'm wondering, if the European General Data Protection Regulation would be relevant in that case. ...
7
votes
1answer
176 views

Under GDPR right of access, do I have the right to receive a copy of scoring sheets / evaluation forms after a structured job interview?

Under the GDPR right of access, what rights do I have to employer assessment of myself in the role of a job applicant after a structured job interview? Presumably, in a structured job interview ...
1
vote
1answer
196 views

Is it legal for me to use publicly accessible user data about a person on my website?

I run a wiki service and I was wondering if someone doxes an anonymous person in the from of a dump (pastebin, screenshots, recordings etc), can we keep that data or perhaps cite it? For instance if ...
1
vote
0answers
51 views

Derogation for small companies in GDPR

Question What does Recital 13 in GDPR make exempt? refers to Article 30 on the technical definition on record keeping. But I am interested in another aspect of this sentence: To take account of ...
3
votes
1answer
202 views

Is email verification for account creation in violation of GDPR?

Is email verification for account creation in violation of GDPR? I am creating a new website, and my account creation is incredibly simple, consisting of username, password (stored as hash), and ...
-3
votes
3answers
85 views

GDPR on employee data

I am making a web-based project management tool that stores employee salaries. What are the implications with GDPR to store this info? Do we need consent from them?
4
votes
1answer
85 views

Responding to GDPR Article 15 requests if all data is already accessible via website

So, Article 15 of the GDPR gives the user the right to access all the personal data concerning him or her. Assume we have a website with user accounts. We store some information that is regarded as ...
10
votes
3answers
3k views

Facebook vs GDPR - Private Messages I sent to others will never be deleted/erased from Facebook servers

I asked this question to Facebook: I would like to know how can I permanently delete private messages from both sides of the conversation. For example, conversations I had in the past with ...
0
votes
1answer
56 views

GDPR - User invitation functionality within learning and development platform

There are similar answers to queries around this but I just wanted to introduce this scenario to get some advice. Company A provides pharmaceutical products to Company B Company B is a pharmacy ...
2
votes
1answer
105 views

Using GDPR against cold-call marketing emails

I recently received a "cold-call" email from a salesman to my professional email address, which is in the form firstname.lastname@company.com. The firstname is a very formal version unlikely to be ...
4
votes
2answers
3k views

Do the GDPR and Cookie-Law regulations apply to localStorage?

We use the localStorage API to store information about the login data to keep the user logged in through various sessions (we do not store personal information), furthermore the localStorage data is ...
2
votes
2answers
594 views

Do I have the right to ask Github to hide my Contribution activity according to General Data Protection Regulation (GDPR)

Do I have the right to ask Github to hide my "Contribution activity" on my public profile page?
1
vote
1answer
179 views

GDPR Compliance - Tell EU users not to sign up

I have a client that wants to approach GDPR compliance by simply putting a notice on his subscription forms along the lines of "Don't sign up, Europeans" From what I gather about GDPR compliance, I'm ...
1
vote
1answer
359 views

google analytics cookie consent with anonymized ip on

I am not even sure how is this possible, so here I am. I have google analytics with anonymized IP on, my users can activate and deactivate google analytics cookies at any time. BUT, on top of that, ...