Questions tagged [gdpr]

Questions about the European Union General Data Protection Regulation (GDPR)

Filter by
Sorted by
Tagged with
2
votes
2answers
87 views

Under GDPR, are service operators allowed to record all clicks of logged in users?

Under GDPR, service operators (e.g. people who run websites or web apps where users login in a browser) are not allowed to collect information about users unless either: The user consents to having ...
2
votes
1answer
137 views

A website is refusing or failing to remove personal data I've requested removed: is this against GRPR?

I have been a member of a website for 13 years and would like all of my old posts removed. I have contacted their support team however the experience has been dreadful: it look a lot of back and ...
2
votes
2answers
197 views

Proof of Consent under GDPR, HOW TO?

One of GDPR Lawful Bases for Processing Personal Data (and that means Collect; Access; Store; Process and Share) is Consent. Companies must have documented proof of Consent as per defined under GDPR ...
2
votes
1answer
159 views

What is “a place where Member State law applies by virtue of public international law”?

Art. 3 (3) GDPR mentions that: This Regulation applies to the processing of personal data by a controller not established in the Union, but in a place where Member State law applies by virtue of ...
2
votes
1answer
56 views

GDPR data portability when no data stored

My website is processing IP addresses to automatically select the language for the site, however these IP addresses are not stored in the database. Even though the visitors give consent, do they have ...
2
votes
1answer
146 views

Is it a violation of GDPR law to email personnel gathered from hunter.io?

I'm a web developer working on a project for a client. The project is a directory of sustainable companies (enviromental-friendly companies). The project is only launching now. The companies listed ...
2
votes
1answer
65 views

GDPR Requiring consent to give up privacy

A website that I visited posted the following: “YOUR PRIVACY IS IMPORTANT TO US. New regulations in your country require you to agree to our terms of use agreement and privacy policy before you can ...
2
votes
2answers
2k views

Do I have the right to ask Github to hide my Contribution activity according to General Data Protection Regulation (GDPR)

Do I have the right to ask Github to hide my "Contribution activity" on my public profile page?
2
votes
2answers
506 views

GDPR privacy policy - Data controller vs Data processor

I'm wondering if someone can shed some light on this for me please and help distinguish the differences between what I need to mention In my privacy policy for a data controller and data processor. ...
2
votes
2answers
421 views

Is the UUID considered personal data?

I am planning to build a mobile platform which I would use the UUID as the username, and a password of user’s choice. So that users would just need to type a chosen password to use my services. ...
2
votes
2answers
103 views

When is pseudonymization insufficient in terms of GDPR compliance when storing and processing data for research purposes?

I am working on a project where data needs to be stored and kept for further processing. It's primarily for research purposes. I know that in order to be GDPR compliant, this data has to be anonymized....
2
votes
1answer
115 views

Under GDPR EU law, can I sue big tech companies (Facebook, Google, Apple) for acquiring and storing my personal data without my consent?

Many of my friends have social media accounts (Instagram, Facebook, etc.) where they regularly post photos of them and where occasionally I appear in them. Many of my friends have their personal ...
2
votes
1answer
61 views

Does GDPR affect personal projects with family data?

My extended family is rather large, and I would like to make a family tree. Given the nature of the data I'll have a lot of peoples personal data. Preferably their immediate family relations, name, a ...
2
votes
1answer
75 views

Can liability for data disclosure be waived by T&Cs under GDPR?

I live in Ireland, an EU county subject to the GDPR. I see in a service T&Cs the line: "Despite our use of commercially reasonable efforts to protect your Personal Information from ...
2
votes
2answers
336 views

If we anonymize Google Analytics IPs do we still need to ask for Cookie consent? [duplicate]

Trying to figure out the most light weight way to have Google Analytics on a site without having to ask for cookie consent. If we turn on IP Anonymization do we still need to ask for consent? If so ...
2
votes
2answers
65 views

Is it allowed to collect additional personal data to comply with the information obligation (Article 14 GDPR)?

True story. A bank erroneously sends its clients' data to a company: name, surname, national identification number. The company becomes a "third party" in accordance with GDPR (Article 4 point 10) and ...
2
votes
1answer
132 views

Can DPO do an internal audit of information security according to ISO 27001?

In one company, due to GDPR, a DPO was designated, who was later given additional role and a new task: to conduct an internal audit of information security according to ISO 27001. Is there a conflict ...
2
votes
1answer
114 views

Can't GDPR compliance be trivially bypassed?

For large tech firms such as Facebook, at least, wouldn't it be a trivial matter for these companies to avoid EU GDPR compliance altogether? Many big companies don't actually "sell" any tangible ...
2
votes
1answer
238 views

Does my Personal Web App need to comply to GDPR?

I am building an app where I have some concerns about GDPR and user data. First of all this is a personal app, no company behind. What the app does: Allows a user to authenticate via e.g. ...
2
votes
1answer
78 views

Can a user request the deletion of their IP address that is stored for moderation purposes?

An Internet forum logs their users' IP addresses for moderation purposes (fighting abusive sockpuppetry, temporary banning a dynamic IP address range in case of a spam attack, permanently banning ...
2
votes
1answer
410 views

Cookie compliance with GDPR when cookies don't collect the PII?

We are using Google Analytics and Facebook Login button (Which comes with preset Facebook Analytics). So here is the question with Google Analytics we are not assigning users with GA UserID and IP ...
2
votes
1answer
91 views

GDPR, email lists, a few email subscribers in the EU

Situation: Say you are an organization that regularly sends out e-newsletter updates to an email list that has been curated over the years by people signing up at events and/or through online sign-up ...
2
votes
1answer
83 views

Using Personal data before consent

I am having an Android App which is going to use some services such as Google Analytics, Firebase etc. I have a thought of having two different consent screens for different region user such as EU ...
2
votes
1answer
76 views

GDPR and online forms: how to prove that the data owner opted in?

How can the data processor who collect personal information using an online form prove that the person who entered her data gave active consent, for instance by clicking a checkmark? Imagine a a ...
2
votes
2answers
251 views

GDPR seeking consent - Subjects not responding to the consent email

We have currently sent out emails to gain consent from subjects to receive our marketing content. For subjects who don't respond, can we send another email chasing the consent? (i feel doing this can ...
2
votes
1answer
54 views

Who's liable for GDPR compliance when embedding/hosting a self-contained 3rd-party website/service?

I'm building a website for a client (a hotel) in Germany. In addition to a bunch of static pages, this website will also host a reservation system which is provided by a 3rd party software company in ...
2
votes
1answer
36 views

How to obtain the legal basis for the processing of personal data from the controller?

If someone has not kept the information recieved under Article 13 or 14, then referring to which article he or she can obtain information about the legal basis for processing of personal data? I do ...
2
votes
1answer
89 views

Data processing locations post-Brexit

I'm trying to understand (as much as is possible given the uncertainty) the implications of Brexit on data processing / GDPR and how it pertains to my clients. I have several UK-based clients, all ...
2
votes
2answers
249 views

does the GDPR apply to publicly available data?

There is a lot of information about what kinds of data the GDPR applies to and what responsibilities a person collecting or processing such data has (e.g. on Wikipedia), but I have found little ...
2
votes
1answer
50 views

Can you request your personal data from a government agency under GDPR?

Can you address a request to a government agency (let's say for example the French "Ministry of education") to access the data they store about you under GDPR ? Does GDPR requirements apply to states ...
2
votes
1answer
69 views

Legal sending personal information to a third party if the user supplied incorrect contact information?

To clarify the title, here is an example: Alice wants to sign up to online store Nile.com Alice enters the email bob@mailprovider.com by accident Nile.com does not send a verification that Alice has ...
2
votes
1answer
72 views

GDPR Requirements for restricted use corporate webapp [closed]

The GDPR is very complicated, and while its requirements may be crystal clear to those who are intimately familiar with it, it is not at all clear to most as to what the exact requirements are in all ...
2
votes
1answer
79 views

Do Bitcoin nodes need consent to store EU citizen's personal data?

The Bitcoin blockchain stores data about bitcoin users. This includes: There bitcoin address, which is linkable to their identity via blockchain analysis Transactions they have made This would seem ...
2
votes
1answer
169 views

Does the GDPR law apply to my hobby-site?

I'm the owner of a website that maintains statistics about crew-members of an other site. The statistics about the crew-members are as follows: Username (on that other website) User ID (on that other ...
2
votes
1answer
140 views

My email has been shared with other parties

I am in the process of searching for a new job and I have applied for a few. Today I received an email from HR representative of one of the companies saying that I was not called for an interview ...
2
votes
1answer
76 views

GDPR and Storing Non-EU Citizen Data as an EU-based company

I work for an EU company based in the UK and often work with clients in China and Africa (and some other non-EU countries). In the future, it may arise that we will be storing some personal ...
2
votes
1answer
144 views

GDPR - What exactly should I do to prevent revenue loss?

I've seen many sites blocking cookies right away and expecting users to click the "Accept cookies" button to activate them. But then I came to stack exchange to ask this question and there's a note on ...
2
votes
2answers
56 views

GDPR and two-party communications

If a chat or email provider wishes to analyze the contents of what their customers are writing, does GDPR require it to obtain the consent of everyone involved in the chat/email? Or would the consent ...
2
votes
1answer
105 views

Advice sought regarding GDPR and managing sensitive data

We have a site that has very sensitive information including medical and information about children. This is on a public website with many organisations shared on one server. There are files that are ...
2
votes
1answer
53 views

GDPR: Applied Security vs Employee Contracts

An Organisation has 10,000 employees. All 10,000 employees have unrestricted access to ALL Customer PII data stored by the Organisation. Only 200 employees require access to the PII data for the ...
2
votes
2answers
291 views

Can I force a website/service to delete my private data

I would like to wipe my online data clean and make sure the people deleted my account. Considering that most services only offer to "close" or "suspend" the account and not delete the data like skype ...
2
votes
2answers
44 views

GDPR compliance when people submit file with other's person personal data

I've published a tool on my website, allowing people to submit a CSV file for a transformation into a XML file according to a governmental XSD. I would like to add a functionality that would allow ...
2
votes
2answers
102 views

Under GDPR, Is a Hashed URL Enough to Protect Customer Data?

Does a hashed URL (sent via email) provide enough security to safeguard customer data? For example, if we publish our customer data online with a hashed URL that we send to the customer (in other ...
2
votes
2answers
182 views

Do user-generated content and votes count as personal data under the General Data Protection Regulation (GDPR)?

Do user-generated content and votes count as personal data under the General Data Protection Regulation (GDPR)? For example, on Stack Exchange, do the questions, answers, comments, messages and ...
2
votes
2answers
149 views

Is a website OK with GDPR if it is not permitting the users to delete their posts?

Think of a website that has gives no option for the users to delete what they have posted -but still the users can delete their account completely. Is it against the right to erasure mentioned here ...
2
votes
1answer
63 views

GDPR and locked content, legal or not?

We are at the point where we want to launch a web application. The application requires the visitor to create a free account to explore the website. So already at the beginning, they need to create ...
2
votes
1answer
353 views

Can a company charge a fee for erasure under GDPR?

Suppose a company has a mailing list to reach out to potential customers. They send both physical and electronic mail. One EU-based potential customer does not want to receive mail anymore and ...
2
votes
1answer
101 views

Can I ask my employer for details held about me?

A company runs a transformation exercise. It asked for employees to fill out answers against questions, which are submitted to a portal and assessed by a number of employees and scored. These scores, ...
2
votes
1answer
103 views

GDPR and Homebrew analytics

Homebrew is collecting anonymous GA analytics by default. User have this information during installation of this package manager. To opt-out you need go to the web page and choise a way to opt-out (...
2
votes
1answer
133 views

Using GDPR against cold-call marketing emails

I recently received a "cold-call" email from a salesman to my professional email address, which is in the form firstname.lastname@company.com. The firstname is a very formal version unlikely to be ...

1
3 4
5
6 7
11