We’re rewarding the question askers & reputations are being recalculated! Read more.

Questions tagged [gdpr]

Questions about the European Union General Data Protection Regulation (GDPR)

Filter by
Sorted by
Tagged with
0
votes
1answer
703 views

Do aggregated personal data fall under GDPR personal data rules?

If I have statistics on users location data (i.e. city, country, etc.) aggregated from hundreds or thousands of users, are there any restrictions on storing and using these data under GDPR? I plan to ...
0
votes
1answer
94 views

GPDR Soft opt-in requirements for pre-GDPR customers

The UK ICO documentation on GDPR definition of legitimate interest says that emails/text messages to existing customers – obtained using ‘soft opt-in’ are allowed. From ICO Direct Marketing Guidance: ...
0
votes
1answer
65 views

Data Subject Rights under GDPR

I am having an Android App which uses Advertising networks and other Analytics services. Now under the GDPR the data controller which is me in my case is required to provide some rights to the user ...
0
votes
1answer
91 views

GDPR: Detecting duplicate accounts in online services with customer data

If I have a game or some other online service I host in which: It is forbidden for a subscriber to hold more than one account, OR Even if it is not forbidden, to detect one person on multiple ...
0
votes
1answer
67 views

GDPR Retention - Secondary Database

GDPR requires retaining personal data after a certain time period defined based on the following clauses: the current and future value of the information; the costs, risks and liabilities associated ...
0
votes
1answer
118 views

How does one exercise their GDPR related rights?

In May, GDPR will become effective and have a global impact on how personal data is handled. Article 20 of the GDPR requires complying systems provide Data Portability. If a European citizen was to ...
0
votes
1answer
222 views

Is an incentivized consent considered freely given in GDPR?

Let's say someone offers you 50 bucks if you opt-in to a consent; would that consent be still considered freely given in the eyes of GDPR (General Data Protection Regulation)? My understanding is ...
0
votes
1answer
27 views

Is an auto-submitting form GDPR/DPA-compliant?

TL;DR is a form that automatically submits itself, even after the user has closed the window, GDPR-compliant? An organisation I am part of has an online form on their intranet for reporting incidents ...
0
votes
0answers
42 views

Does USA have a law similar to GDPR that gives you the right to a copy of the information a religious organization has on you?

For some background: the EU "Data Protection Directive" is a European Union directive which regulates the processing of personal data within the European Union, as explained in this Wikipedia article. ...
0
votes
0answers
43 views

Question Regarding GDPR

I have a question regarding The General Data Protection Regulation 2016/679 in European law and I'm not even sure this is the right place to ask, but I'll ask anyway as I'm stuck on where to find this ...
0
votes
0answers
13 views

Are previous communiication preferences retained with form submissions?

I'm trying to understand the correct procedure when dealing with storing a users email subscription types, and the behaviour in relation to legitimate interest and consent to communicate. And the ...
0
votes
0answers
13 views

Complying with GDPR when storing emails and IPs for a refferal campaign

I want to start an email referral campaign to collect emails for the upcoming launch of a videogame and was warned that I need to comply with the GDPR rules of privacy. I'll be storing the email ...
0
votes
0answers
24 views

Application of the GDPR to emails one has sent [duplicate]

Reading https://gdpr-info.eu/issues/personal-data/, it seems you could use the GDPR for, well, unexpected request. For example, if I ask Google to remove any email from me I have send, not only from ...
0
votes
0answers
36 views

Single sign on via cookies and GDPR compliance?

Going to call my two sites "identity provider" and "WordPress site". Flow is: User logs in on identity provider User is redirected to Wordpress site with an SSO token in the URL parameter. SSO token ...
0
votes
0answers
35 views

How does GDPR apply for normal email communication?

I am a member in an association and in charge of membership management and general IT. We exchange information about the work of the association by email using private mailing lists the association ...
0
votes
0answers
14 views

GDPR the other way arround [duplicate]

Let's say that there is a site with a list of people that did one thing. Once with GDPR rules, those people can ask to be removed from that site. I was wondering if that site changes the way it makes ...
0
votes
0answers
12 views

Do you have to provide information about processing personal data for contact persons?

Two companies write a legal agreement between themselves and contain contact details of their representatives in its content. Assuming that these contact details are personal data, are these companies ...
0
votes
0answers
18 views

Does sending email with personal data require agreement with email provider under GDPR? [duplicate]

It's common practice to allow users of your service to get email notifications about interesting events. For example user Joe subscribes to notifications to email address joe@emailprovider.com about ...
0
votes
0answers
27 views

Cause of action for data processor where the data controller neglects to notify supervisory authority

By reading the GDPR I have gathered that a data processor is obligated to notify the data controller of a breach within 72 hours and the data controller is likewise obligated to notify the supervisory ...
0
votes
0answers
31 views

Does right to Data Access request /GDPR supersede restrictions in Employment contract of previous employer

Does right to Data Access request /GDPR supersede restrictions in Employment contract of previous employer ? Is above fundamental right's affected by Clauses in temporary employment contract like '...
0
votes
0answers
26 views

Changes to the privacy policy that require the user's consent: GDPR compliance

Suppose you have an online service, with a privacy policy that the users have accepted. Then at some point you want to introduce some changes to that privacy policy, in a way that requires the user's ...
0
votes
0answers
27 views

How do platform sites ensure their users do not abuse forwarded user data?

I am asking this question based upon the specific case of open source software sites, but the concept should probably apply equally to other websites that serve as a "platform" for their users to ...
0
votes
1answer
87 views

Under GDPR, does an EU citizen have a right to their American data?

If I have a database with EU citizens on it, but they provide their American data (American address, phone number, email, etc.), am I bound to GDPR?
0
votes
1answer
101 views

GDPR and a cell phone paid through work?

Company Contacts page From what I understand, the contact information at work is not regulated by GDPR since it is considered B2B. For instance my private email is regulated by GDPR, but my work ...
0
votes
2answers
61 views

GDPR: Transmitting results from secondary to primary care records

In the UK, results of a blood (or other) test taken at a hospital (in secondary care) are stored in the hospital's records but are not automatically forwarded into primary care records (GP records) ...
-1
votes
1answer
243 views

Google AdWords banned my account. Can I request complete deletion under GDPR?

GDPR introduces a new right to be forgotten, and I no longer consent to Google keeping my data for the sole purpose of maintaining a ban. (Google is keeping my data in order to enforce their ban on ...
-1
votes
1answer
42 views

Is there a proper lexicon for legal documents? [closed]

My apologies in advance for such a childish manner of asking a question here. If it deserves a downvote - go ahead. Yet for me it is that simple, but so lethal. As far as we all human beings, I am ...
-1
votes
1answer
62 views

Do I have to include a GDPR in my app even tho I don't collect data from users? [closed]

I have written an android app The user does some HTTP requests do an endpoint and gets data, also the user can download images to his own storage. But I don't collect any data from the user? Is is ...
-1
votes
1answer
70 views

Is identification of an employee by another employee restricted by GDPR? [closed]

Does GDPR require anonymization of user idents when used in testing and development? User idents will identify an employee by other employees because it's linked to login system. Outside of the ...
-2
votes
1answer
68 views

Is a GDPR flashmob legal?

If users decide to run a viral laege scale flashmob to get their data in terms of GDPR from a company, is this procedure legal? Like, competing who manages to make a request to inform about their ...
-2
votes
2answers
100 views

GDPR no opt out option [closed]

Is it legal if we do not offer an explicit opt-out option in our app for non-persnonal data collection? We planned to explain to the user what data we collect and at the bottom of the screen there ...
-3
votes
3answers
85 views

GDPR on employee data

I am making a web-based project management tool that stores employee salaries. What are the implications with GDPR to store this info? Do we need consent from them?