Questions tagged [gdpr]

Questions about the European Union General Data Protection Regulation (GDPR)

Filter by
Sorted by
Tagged with
2
votes
2answers
189 views

Can I force a website/service to delete my private data

I would like to wipe my online data clean and make sure the people deleted my account. Considering that most services only offer to "close" or "suspend" the account and not delete the data like skype ...
2
votes
2answers
66 views

Under GDPR, Is a Hashed URL Enough to Protect Customer Data?

Does a hashed URL (sent via email) provide enough security to safeguard customer data? For example, if we publish our customer data online with a hashed URL that we send to the customer (in other ...
2
votes
2answers
84 views

Do user-generated content and votes count as personal data under the General Data Protection Regulation (GDPR)?

Do user-generated content and votes count as personal data under the General Data Protection Regulation (GDPR)? For example, on Stack Exchange, do the questions, answers, comments, messages and ...
2
votes
2answers
129 views

Is a website OK with GDPR if it is not permitting the users to delete their posts?

Think of a website that has gives no option for the users to delete what they have posted -but still the users can delete their account completely. Is it against the right to erasure mentioned here ...
2
votes
1answer
57 views

GDPR and locked content, legal or not?

We are at the point where we want to launch a web application. The application requires the visitor to create a free account to explore the website. So already at the beginning, they need to create ...
2
votes
1answer
82 views

Can a company charge a fee for erasure under GDPR?

Suppose a company has a mailing list to reach out to potential customers. They send both physical and electronic mail. One EU-based potential customer does not want to receive mail anymore and ...
2
votes
1answer
93 views

Can I ask my employer for details held about me?

A company runs a transformation exercise. It asked for employees to fill out answers against questions, which are submitted to a portal and assessed by a number of employees and scored. These scores, ...
2
votes
1answer
70 views

GDPR and Homebrew analytics

Homebrew is collecting anonymous GA analytics by default. User have this information during installation of this package manager. To opt-out you need go to the web page and choise a way to opt-out (...
2
votes
1answer
104 views

Using GDPR against cold-call marketing emails

I recently received a "cold-call" email from a salesman to my professional email address, which is in the form firstname.lastname@company.com. The firstname is a very formal version unlikely to be ...
2
votes
1answer
119 views

Under GDPR, is an image of a person's face a “Special Category Data”?

I'm triyng to understand whether, under European GDPR, an image of a person's face is a "Special Category Data". From this image I could determine person's: ethnic origin (for example: from the ...
2
votes
1answer
42 views

Does the GDPR cover / apply to (in any way) photography at a workplace event?

A company organises a staff event during business hours. Say a hackathon or similar. The company arranges a photographer and videographer to record pictures, footage, presentations etc. Speaking ...
2
votes
1answer
56 views

Under what conditions can an Asian company access Database hosted by a British company containing data of European citizens?

I work for a small non-EU company1 on projects of a British company2 which rents out houses. All the live databases3 are located in the UK on their premises and we access those databases and servers ...
2
votes
2answers
398 views

Is the GDPR applicable to data stored in human memory?

If data is stored in human memory, is the GDPR applicable? Say, an employee of a company remembers an email address of a client, their date of birth, or even what their face looks like, does the ...
2
votes
1answer
199 views

GDPR: Receiving marketing as precondition for receiving a free service, legitimate interest?

I am interested in the situation where a company provides a free service on condition that they can market to the customer (by electronic message) until the customer unsubscribes from the service. ...
2
votes
2answers
178 views

GDPR - A mobile App that allows user to store media do we have to option user consent?

Have a few doubts for GDPR law. If we are a mobile app, that allows user to store data inside our application like photos, videos and notes etc then do we have to get user content or anything related ...
2
votes
1answer
95 views

Does a community-made project using data from a games API need to adhere to GDPR?

I am part of the team on a popular website that provides users with overviews of their statistics for a particular game. Our data is gathered from a publicly available API and in order to provide our ...
2
votes
1answer
59 views

How does the gdpr apply to software houses/companies and call centres?

I would like to know how the gdpr applies to software companies/houses. What aspects or workings of software companies need gdpr compliance? And what is the sort of personal information they gather ...
2
votes
1answer
176 views

GDPR seeking consent - Subjects not responding to the consent email

We have currently sent out emails to gain consent from subjects to receive our marketing content. For subjects who don't respond, can we send another email chasing the consent? (i feel doing this can ...
2
votes
2answers
133 views

Does the EU GDPR apply to these types of natural persons?

Does the GDPR apply to a website operator who is a natural person (not a company or non-profit) and uses the website directly for commercial activity uses the website to advertise his/her other ...
2
votes
0answers
54 views

Does LinkedIn act illegally if asking me whether I want to share my email contacts and send them invitations?

From time to time LinkedIn asks me whether I would like upload emails of my contacts. In terms of GDPR I would say it is not allowed action if I do not have signatures of my contacts that they agree I ...
2
votes
4answers
197 views

How often does a website have to ask for cookie consent?

I'm working on a website that requires cookie consent because of the GDPR. After the user agrees to storing cookies, the browser will store this data for 10 years. Using another browser, device, or ...
2
votes
0answers
56 views

Removing my personal data ex-employer (RGPD/GPDR ?)

I work and live in France. I worked for a company last year but I quit working there months ago. Since I left, they still have not have removed some data accessible on the internet, like my first name/...
2
votes
0answers
80 views

How to notify the use of cookies (Cookie Law Notice)

I have been investigating notifications about the use of cookies and a question has come up: Why 99.9% of websites do not report correctly about the use of cookies and nothing happens? With "...
2
votes
0answers
79 views

Ebay - GDPR - Legality of re-assigning Data Controllers?

This Question pertains to the user privacy notice and practices of Ebay, in particular reference to its compliance with the European Data Protection Regulation 2016. According to Article 27 (...
2
votes
1answer
65 views

GDPR - website with no cookies, no analytics, no private data collection

I'm building a website right now and I'm little bit concerned about GDPR and I hope you can help me out. So, the website will be a blog with posts, product reviews and some affiliate links, I plan to ...
2
votes
0answers
31 views

GDPR which practice is compliant?

I have seen many ways of requiring user acceptance of their data usage on the internet. Which are conforming? Keep in mind I am talking just about the consent acquiring mechanism. In order from the ...
2
votes
2answers
90 views

GDPR - Can I store domain names?

I create the code that everybody can download for free and use on their website (MIT licensed). In that code, I want to put the additional code sending requests to my server if the domain name is ...
2
votes
0answers
259 views

Explanations for GDPR if no personal data is collected?

I have a website that is a travel search engine and I am very concerned about GDPR. I am not interested in any private information from the users for marketing or such things. I just use Google ...
2
votes
0answers
42 views

What happens to SARs recieved before the 25th May?

With GDPR requiring companies to respond to Subject Access Requests, within a month - my employer has now ensured we have processes to deal with any SAR recieved after the 25th of May. However, in ...
2
votes
3answers
139 views

I live outside of Europe. If I gain e-Residency in Estonia, will I be protected by GDPR regulations?

Are people who gain an Estonian e-Residency treated as a European citizen under upcoming GDPR regulations?
2
votes
0answers
92 views

GDPR and logging which user accessed which personal information

If an organization stores personal information on their website/web application (e.g. database) GDPR states that that given organization should be able to determine and report who accessed what ...
2
votes
0answers
75 views

Who is the data controller of users' data of a SaaS platform?

Person A is an employee of company B, which in turn is a customer of a SaaS platform from company C. Both companies are within the EU. The B company uses the software to keep track of its customers, ...
2
votes
0answers
60 views

GDPR - Right of Access From Processor

If my organisation is processing data on behalf of a controller, does the data subject have access rights through the processor, or must Subject Access Requests (SARs) go through the controller? If ...
1
vote
1answer
117 views

Can I sue a company for testing Captcha when unsubscribing from email?

With all the data protection stuff these days I was wondering if it is possible to sue a company for making a user pass a CAPTCHA test when unsubscribing from email. I don't know the law surrounding ...
1
vote
3answers
61 views

Does GDPR apply to personal information entered in a password-field?

If someone enters personal data in a field which purpose is not to handle personal data, does GDPR apply? For example if someone enters their email, phone number or name in a password-field? If so, ...
1
vote
1answer
78 views

Is it ok to assume a user has opted-in to receive emails in an application where the main purpose is sending notifications

I originally posted this on another Stack Exchange website but was advised this might be a better place for it. Original is here: https://security.stackexchange.com/questions/215300/is-it-ok-to-assume-...
1
vote
4answers
150 views

Is it okay for letting agency to deny me viewing for not telling them my employer name and how long I had been in a profession?

Is it okay for a letting agency to ask me these questions ? What is the name of company I work for ? The property I am renting at the present is through agency or a landlord? How long I have been ...
1
vote
1answer
26 views

What data processing requires opt-in consent for an existing customer under GDPR?

I'm a customer of a bank and presumably they can claim legitimate interest for the account and service updates they send. However I also received an email and letter about their referral program where ...
1
vote
1answer
115 views

Does data that is anonymized need to be collected in the event of a GDPR Subject Access Request?

Google Analytics anonymizes and aggregates all user data so it is not possible to look up an individual user. Does that mean that in the event that we use Google Analytics and receive a Subject ...
1
vote
1answer
43 views

Required data entry seemingly against GDPR

From https://security.stackexchange.com/questions/186327/why-do-some-gdpr-emails-require-me-to-opt-out-and-some-to-opt-in : As a consequence the "G29", the group of national data protection ...
1
vote
2answers
2k views

What counts as personal data under GDPR?

As a developer of software intended for use by EU citizens, I am committed to complying with the personal data requirements of the forthcoming legislation (EU Regulation 2016/679). There is a ...
1
vote
1answer
71 views

GDPR: Can I collect non-personally identifiable information?

I'm creating a game that collects data in two ways: Unity Analytics for usage stats, and bug reports that sends me a report of an issue along with several files to help me diagnose the issue. However, ...
1
vote
2answers
63 views

Does CNNs cookie consent banner comply with the GDPR?

I just got done reading this cookie consent material and it says that we need to keep a record of cookie consent. It also says that the notification needs to allows users to opt in and out of ...
1
vote
1answer
42 views

What are the types of personal data?

In the GDPR, the concept of data categories is used and examples of such categories are given. The concept of data types is also used, but I do not know what they are. Example of data categories, ...
1
vote
1answer
253 views

GDPR, is scrolling the page can mean cookie acceptance?

For example take a look at https://www.cookiebot.com/ as soon as you scroll down a bit, the consenting options fades away, and it puts a cookie in your browser, that you accepted their cookies. Is ...
1
vote
1answer
60 views

Swedish Government and GDPR

Given that the nordics are one of the most transparent societies, is there any scope that these governments may be in breach of GDPR, for example with respect to default disclosure positions on things ...
1
vote
1answer
89 views

What does Recital 13 in GDPR make exempt?

I read through Recital 13 in GDPR and it states To take account of the specific situation of micro, small and medium-sized enterprises, this Regulation includes a derogation for organisations ...
1
vote
2answers
171 views

Handling a GDPR subject access request when using google analytics?

When using Google Analytics and receiving a GDPR subject access request does the party receiving the request also have to send all data collected by Google Analytics?
1
vote
1answer
249 views

Do data privacy requirements apply to watch lists and sanctions lists?

There are different sanctions lists and watch lists all over the world maintained by governments & ministries, like well-known ones: OFAC lists, EU Consolidated Sanctions, CIA & FBI watch ...
1
vote
2answers
118 views

Can anonymized data be collected under GDPR without consent?

I am having an Android App in which I want to track the usage of the app. But the usage will not have anyone identity for eg. I would collect one user used my app for around 10 minutes but who is that ...