Questions tagged [gdpr]

Questions about the European Union General Data Protection Regulation (GDPR)

Filter by
Sorted by
Tagged with
2
votes
1answer
42 views

Does the GDPR cover / apply to (in any way) photography at a workplace event?

A company organises a staff event during business hours. Say a hackathon or similar. The company arranges a photographer and videographer to record pictures, footage, presentations etc. Speaking ...
2
votes
1answer
61 views

Under what conditions can an Asian company access Database hosted by a British company containing data of European citizens?

I work for a small non-EU company1 on projects of a British company2 which rents out houses. All the live databases3 are located in the UK on their premises and we access those databases and servers ...
2
votes
1answer
232 views

GDPR: Receiving marketing as precondition for receiving a free service, legitimate interest?

I am interested in the situation where a company provides a free service on condition that they can market to the customer (by electronic message) until the customer unsubscribes from the service. ...
2
votes
2answers
195 views

GDPR - A mobile App that allows user to store media do we have to option user consent?

Have a few doubts for GDPR law. If we are a mobile app, that allows user to store data inside our application like photos, videos and notes etc then do we have to get user content or anything related ...
2
votes
1answer
103 views

Does a community-made project using data from a games API need to adhere to GDPR?

I am part of the team on a popular website that provides users with overviews of their statistics for a particular game. Our data is gathered from a publicly available API and in order to provide our ...
2
votes
4answers
186 views

I live outside of Europe. If I gain e-Residency in Estonia, will I be protected by GDPR regulations?

Are people who gain an Estonian e-Residency treated as a European citizen under upcoming GDPR regulations?
2
votes
1answer
60 views

How does the gdpr apply to software houses/companies and call centres?

I would like to know how the gdpr applies to software companies/houses. What aspects or workings of software companies need gdpr compliance? And what is the sort of personal information they gather ...
2
votes
2answers
144 views

Does the EU GDPR apply to these types of natural persons?

Does the GDPR apply to a website operator who is a natural person (not a company or non-profit) and uses the website directly for commercial activity uses the website to advertise his/her other ...
2
votes
0answers
46 views

How does the GDPR differ from national data protection law?

Before the GDPR came into effect, I had to deal with both the German Bundesdatenschutzgesetz and the Italian Codice in materia di dati personali, and recall them having very similar provisions (though ...
2
votes
0answers
57 views

Does LinkedIn act illegally if asking me whether I want to share my email contacts and send them invitations?

From time to time LinkedIn asks me whether I would like upload emails of my contacts. In terms of GDPR I would say it is not allowed action if I do not have signatures of my contacts that they agree I ...
2
votes
4answers
684 views

How often does a website have to ask for cookie consent?

I'm working on a website that requires cookie consent because of the GDPR. After the user agrees to storing cookies, the browser will store this data for 10 years. Using another browser, device, or ...
2
votes
0answers
176 views

Is opt-in now required for iOS app using Fabric/Crashlytics/Flurry due to GDPR?

It's been a while since I last pushed out an app to the iOS store, and since then the new EU requirements for data protection General Data Protection Regulation Compliance, GDPR, came into force. Most ...
2
votes
0answers
151 views

How to notify the use of cookies (Cookie Law Notice)

I have been investigating notifications about the use of cookies and a question has come up: Why 99.9% of websites do not report correctly about the use of cookies and nothing happens? With "...
2
votes
0answers
90 views

Ebay - GDPR - Legality of re-assigning Data Controllers?

This Question pertains to the user privacy notice and practices of Ebay, in particular reference to its compliance with the European Data Protection Regulation 2016. According to Article 27 (...
2
votes
1answer
92 views

GDPR - website with no cookies, no analytics, no private data collection

I'm building a website right now and I'm little bit concerned about GDPR and I hope you can help me out. So, the website will be a blog with posts, product reviews and some affiliate links, I plan to ...
2
votes
1answer
238 views

GDPR Compliance - Tell EU users not to sign up

I have a client that wants to approach GDPR compliance by simply putting a notice on his subscription forms along the lines of "Don't sign up, Europeans" From what I gather about GDPR compliance, I'm ...
2
votes
0answers
31 views

GDPR which practice is compliant?

I have seen many ways of requiring user acceptance of their data usage on the internet. Which are conforming? Keep in mind I am talking just about the consent acquiring mechanism. In order from the ...
2
votes
2answers
101 views

GDPR - Can I store domain names?

I create the code that everybody can download for free and use on their website (MIT licensed). In that code, I want to put the additional code sending requests to my server if the domain name is ...
2
votes
0answers
293 views

Explanations for GDPR if no personal data is collected?

I have a website that is a travel search engine and I am very concerned about GDPR. I am not interested in any private information from the users for marketing or such things. I just use Google ...
2
votes
0answers
43 views

What happens to SARs recieved before the 25th May?

With GDPR requiring companies to respond to Subject Access Requests, within a month - my employer has now ensured we have processes to deal with any SAR recieved after the 25th of May. However, in ...
2
votes
0answers
101 views

GDPR and logging which user accessed which personal information

If an organization stores personal information on their website/web application (e.g. database) GDPR states that that given organization should be able to determine and report who accessed what ...
2
votes
0answers
91 views

Who is the data controller of users' data of a SaaS platform?

Person A is an employee of company B, which in turn is a customer of a SaaS platform from company C. Both companies are within the EU. The B company uses the software to keep track of its customers, ...
2
votes
0answers
63 views

GDPR - Right of Access From Processor

If my organisation is processing data on behalf of a controller, does the data subject have access rights through the processor, or must Subject Access Requests (SARs) go through the controller? If ...
1
vote
3answers
2k views

What counts as personal data under GDPR?

As a developer of software intended for use by EU citizens, I am committed to complying with the personal data requirements of the forthcoming legislation (EU Regulation 2016/679). There is a ...
1
vote
2answers
54 views

Where is the line between transactional vs marketing emails with GDPR?

If a company that offers a product where the user logs in, such as a SAAS product, and they send emails with certain intentions, where is the line drawn between a transactional and a marketing email? ...
1
vote
1answer
182 views

Can I sue a company for testing Captcha when unsubscribing from email?

With all the data protection stuff these days I was wondering if it is possible to sue a company for making a user pass a CAPTCHA test when unsubscribing from email. I don't know the law surrounding ...
1
vote
3answers
69 views

Does GDPR apply to personal information entered in a password-field?

If someone enters personal data in a field which purpose is not to handle personal data, does GDPR apply? For example if someone enters their email, phone number or name in a password-field? If so, ...
1
vote
1answer
94 views

Is it ok to assume a user has opted-in to receive emails in an application where the main purpose is sending notifications

I originally posted this on another Stack Exchange website but was advised this might be a better place for it. Original is here: https://security.stackexchange.com/questions/215300/is-it-ok-to-assume-...
1
vote
4answers
155 views

Is it okay for letting agency to deny me viewing for not telling them my employer name and how long I had been in a profession?

Is it okay for a letting agency to ask me these questions ? What is the name of company I work for ? The property I am renting at the present is through agency or a landlord? How long I have been ...
1
vote
1answer
32 views

What data processing requires opt-in consent for an existing customer under GDPR?

I'm a customer of a bank and presumably they can claim legitimate interest for the account and service updates they send. However I also received an email and letter about their referral program where ...
1
vote
1answer
132 views

Does data that is anonymized need to be collected in the event of a GDPR Subject Access Request?

Google Analytics anonymizes and aggregates all user data so it is not possible to look up an individual user. Does that mean that in the event that we use Google Analytics and receive a Subject ...
1
vote
1answer
47 views

Required data entry seemingly against GDPR

From https://security.stackexchange.com/questions/186327/why-do-some-gdpr-emails-require-me-to-opt-out-and-some-to-opt-in : As a consequence the "G29", the group of national data protection ...
1
vote
2answers
45 views

GDPR: Local encrypted database of non-identifiable information

There is a piece of software that has a database on my local computer. This database does not contain personally identifiable information but the contents are created by the user. However, this ...
1
vote
2answers
77 views

Laws and IP logging

Given I do not collect any personal data with an online service, at least IPs will be logged by the web server. An IP can be mapped to a person. What I've read recently, with nginx for example you ...
1
vote
2answers
75 views

Is storing business data considered personal data?

I want to create an online application. The visitor could enter his website URL then the application will make some analysis. The application asks the visitor if he wants a regular website report on e-...
1
vote
1answer
109 views

GDPR: Can I collect non-personally identifiable information?

I'm creating a game that collects data in two ways: Unity Analytics for usage stats, and bug reports that sends me a report of an issue along with several files to help me diagnose the issue. However, ...
1
vote
2answers
77 views

Does CNNs cookie consent banner comply with the GDPR?

I just got done reading this cookie consent material and it says that we need to keep a record of cookie consent. It also says that the notification needs to allows users to opt in and out of ...
1
vote
2answers
130 views

Do you have to provide the name and email address of your data protection officer?

Looking at Steam's privacy policy, they don't provide an email address to reach the DPO nor do they name them: You can contact Valve's data protection officer at the address below. While we ...
1
vote
1answer
54 views

What are the types of personal data?

In the GDPR, the concept of data categories is used and examples of such categories are given. The concept of data types is also used, but I do not know what they are. Example of data categories, ...
1
vote
1answer
527 views

GDPR, is scrolling the page can mean cookie acceptance?

For example take a look at https://www.cookiebot.com/ as soon as you scroll down a bit, the consenting options fades away, and it puts a cookie in your browser, that you accepted their cookies. Is ...
1
vote
1answer
65 views

Swedish Government and GDPR

Given that the nordics are one of the most transparent societies, is there any scope that these governments may be in breach of GDPR, for example with respect to default disclosure positions on things ...
1
vote
1answer
96 views

What does Recital 13 in GDPR make exempt?

I read through Recital 13 in GDPR and it states To take account of the specific situation of micro, small and medium-sized enterprises, this Regulation includes a derogation for organisations ...
1
vote
1answer
295 views

Facebook blocked my account until I consent to their new privacy policy under GDPR. If I consent now, will I be able to withdraw my consent later?

I am going to delete my Facebook account in a month, I can't do it now because I still use it for work. I live in the EU and Facebook has blocked access to my account unless I accept their privacy ...
1
vote
2answers
226 views

Handling a GDPR subject access request when using google analytics?

When using Google Analytics and receiving a GDPR subject access request does the party receiving the request also have to send all data collected by Google Analytics?
1
vote
1answer
341 views

Do data privacy requirements apply to watch lists and sanctions lists?

There are different sanctions lists and watch lists all over the world maintained by governments & ministries, like well-known ones: OFAC lists, EU Consolidated Sanctions, CIA & FBI watch ...
1
vote
2answers
140 views

Can anonymized data be collected under GDPR without consent?

I am having an Android App in which I want to track the usage of the app. But the usage will not have anyone identity for eg. I would collect one user used my app for around 10 minutes but who is that ...
1
vote
1answer
543 views

GDPR - What's classed as an opt in for Google Analytics cookie and do I need to do it?

I'm wondering if anyone can shed any light on this for me please. I've been doing alot of research about GDPR lately and how it is going to effect my websites using Google Analytics. From what I can ...
1
vote
1answer
45 views

Is storing only part(s) of an IP address compliant with the GDPR?

Let's say that ip address is something like xxx.52.114.191. Would be allowed to store into database 113.191? And let's say address is Nick Example, Some street 5, 33012 Florida, US. Would be allowed ...
1
vote
1answer
134 views

Covid tracking app, forcing citizen to install it on insecure devices

Here's the hypothetical scenario, which in some countries might not be hypothetical after all: The app. Because of Covid-19, the government decides that some citizens must install an app on their ...
1
vote
1answer
34 views

Does the European Union allow to store medical (sensitive) data in cloud platforms such as Amazon Web Services or Google Cloud?

Does the EU allow to store patients medical data in cloud databases from providers such as Amazon Web Services or Google Cloud? What are the legal requirements? Can you point at some legal source ...

1
4 5
6
7 8
11