Questions tagged [gdpr]

Questions about the European Union General Data Protection Regulation (GDPR)

Filter by
Sorted by
Tagged with
0
votes
2answers
59 views

Is anonymous analytics data subject to GDPR?

I am reading the definition of "personal data" here https://gdpr-info.eu/issues/personal-data/. My understanding is that GDPR comes into play when information is about personal data. Let's say there ...
0
votes
1answer
57 views

GDPR - We're a global company and are expanding to Europe, do we need to save data there?

We're a global company and are expanding to Europe. We have users log in to our service and then they can use it. If a user is from the EU, do we have to store all of their personal information ...
0
votes
1answer
37 views

Does anonymised Google Analytics require positive opt-in under GDPR/PECR?

The EU defines personal data as: ‘personal data’ means any information relating to an identified or identifiable natural person (‘data subject’); an identifiable natural person is one who can ...
0
votes
2answers
50 views

GDPR - Service storing other people's clients' emails

I am working on a service that allows people to import data regarding their sales within a particular platform. This data is imported in an excel format (CSV) and contains all sales informations for a ...
0
votes
2answers
51 views

GDPR - Company employee [closed]

I believe to know that an employee at a company that I'm customer at, I believe has accessed my customer profile and gotten personal information, such as my full name, ID number and address. I know ...
0
votes
1answer
57 views

GDPR: legal to combine (clickstreams) tracking and survey?

I am working on a website that collects clickstream data using Google Analytics. There is also a opti-layer. In the near future a survey to ask in which industry a visitor works shall be integrated, ...
0
votes
2answers
48 views

GDPR question about processing personal data for research purposes that yield aggregated results

So my thesis proposal is about predicting mortality rates. I will work with a company (insuretech) that already has database of 2m+ people with death dates (if dead), birth date, transaction volume (...
0
votes
2answers
93 views

Do I need permission to publish a FOI response in a blog post or open letter?

I recently submitted a FOI request to my local council, and had a response. Part of the response stated the following: You are free to use this information for your own use, including for non-...
0
votes
1answer
135 views

Locate me data obtained from european register

There is an entry on locatefamily.com that I know because it has certain details that were used on a European domain register in 2014. I an EU citizen living in the states. Does the GDPR apply to them ...
0
votes
1answer
85 views

Do corporations have any legal liability for XSS exploits that can harvest private/payment info?

So let's say there's a website that is made up of crowd sourced articles (let's say it's about politics). The website has users from around the world. All articles have to be approved by an editor, ...
0
votes
2answers
51 views

GDPR: can we ask the building owner to share and/or destroy data about one's RFID activity?

this is a follow up of https://security.stackexchange.com/questions/84184/do-rfid-key-cards-track-the-user-through-entry-ways It seems most buildings store the activity of one's RFID key activity. ...
0
votes
1answer
63 views

GDPR: Can I do anything that touches a system with live customer data if I have no instructions at all

I have just become aware of this particular Article 29, which has one good side: it is short. The processor and any person acting under the authority of the controller or of the processor, who has ...
0
votes
1answer
186 views

GDPR: Can a website not process personal data?

I want to have a website where I publish my own articles. When a user requests a webpage, I receive an HTTP request from their browser, which contains the IP. Now, for a split second while the ...
0
votes
1answer
44 views

Data Portability in GDPR

I've reading: https://gdpr-info.eu/art-20-gdpr/ It says: The data subject shall have the right to receive the personal data concerning him or her, which he or she has provided to a controller, ...
0
votes
1answer
60 views

Data Scraping public athlete name and performance data. Does this need to be treated as personal data?

Consider the following data for amateur/professional athletes: Athlete name, Athletic event + best performance data e.g.: Joe Bloggs 5k 19:00 10k 40:00 Half Marathon 85:00 other events etc... and ...
0
votes
1answer
52 views

Replication of user data a violation of GDPR

I'm in the planing staging of building game service provider, kind of like Xbox Live, PSN, Steam, etc. As far as I understand in the terms of the GDPR, information that can directly identify users ...
0
votes
1answer
107 views

Yahoo Messenger and the GDPR

Yahoo Messenger was was discontinued on December 1, 2018. On this date downloading of chat history was stopped. However they did not tell their users what happened to their data associated with Yahoo ...
0
votes
1answer
39 views

Does GDPR impose requirement for an EU based e-mail address?

Does GDPR impose requirement for an EU based e-mail address? I mean, not directly but indirectly for all practical purposes. Assume an EU based company having a public website. GDPR requires a ...
0
votes
2answers
92 views

Emails from clients and GDPR

I created a website for a friend's company that has no user account feature, it is only meant to be an online catalog for prices. The only user data we might receive are data that users fill in the ...
0
votes
1answer
45 views

Modify a client file

After the setup of the GDPR law about personnal data security, I have a case I'm not sure about. Test case: I receive an addresses file from a client containing x lines of addresses with personnal ...
0
votes
1answer
160 views

How can GDPR affect user generated content?

I'm wondering where the lines of GDPR are in regard to user generated content and how it meets the Communications Decency Act. Section 230 has been what ISPs and websites (Yelp as an example) use as ...
0
votes
1answer
53 views

How does GDPR affect a personal web application that uses third parties to authenticate?

I created a publicly accessible web application that allows me to remotely control the heating system in my home. The only data the app itself collects is logs of user activity (e.g.: logging when I ...
0
votes
1answer
57 views

GDPR - User invitation functionality within learning and development platform

There are similar answers to queries around this but I just wanted to introduce this scenario to get some advice. Company A provides pharmaceutical products to Company B Company B is a pharmacy ...
0
votes
1answer
25 views

What if I stored Personally identifiable information (PII) on cloud but with IP restricted environment or using VPN. Will it be GDPR compliance?

I have a requirement to fetch and search (partial search, full text search, fuzzy search etc) personally identifiable information (PII) data in Admin Panel and I can restrict my environment with IP ...
0
votes
2answers
119 views

GDPR - Do we need to give individual mixed personal data of 2 individuals? (Right of access)

Individual is asking for phone recording which contains personal information of that individual and our marketing person, it also contains our sales speech. Do we need to provide copy of phone ...
0
votes
1answer
250 views

GDPR: event registration form and email communications

I need to set up a registration form for an event in which the main communication channel between the registered users and the organizers is the e-mail. E-mails could be sent before, during and after ...
0
votes
1answer
78 views

For GDPR compliance, what documents or contracts need to contain a list of processors or sub-processors?

Should a complete list of processors or sub-processors be written anywhere for GDPR compliance? If so, who is required to do so? Controllers, processors, sub-processors? And where should the list be ...
0
votes
1answer
120 views

Do i have to disclose all processors to my controller? EU-GDPR

I'm working as a processor, we host and develop an online information portal (analysis) for customers of different controllers (all working in the same kind of buisness). The different controllers ...
0
votes
1answer
46 views

GDPR: Subscribing for advertisments using an email that a user does not own.

Is a company GDPR compliant if user A is able to subscribe for advertisments using an email of user B, if the company does not verify the ownership of the email and still send advertisments?
0
votes
1answer
78 views

Does the GDPR enforce an age restriction?

Many services limit the age of users in europe to 16+ bases on the GDPR. Does the GDPR really forces them to do this?
0
votes
1answer
852 views

Do aggregated personal data fall under GDPR personal data rules?

If I have statistics on users location data (i.e. city, country, etc.) aggregated from hundreds or thousands of users, are there any restrictions on storing and using these data under GDPR? I plan to ...
0
votes
1answer
138 views

GPDR Soft opt-in requirements for pre-GDPR customers

The UK ICO documentation on GDPR definition of legitimate interest says that emails/text messages to existing customers – obtained using ‘soft opt-in’ are allowed. From ICO Direct Marketing Guidance: ...
0
votes
1answer
67 views

Data Subject Rights under GDPR

I am having an Android App which uses Advertising networks and other Analytics services. Now under the GDPR the data controller which is me in my case is required to provide some rights to the user ...
0
votes
1answer
94 views

GDPR: Detecting duplicate accounts in online services with customer data

If I have a game or some other online service I host in which: It is forbidden for a subscriber to hold more than one account, OR Even if it is not forbidden, to detect one person on multiple ...
0
votes
1answer
67 views

GDPR Retention - Secondary Database

GDPR requires retaining personal data after a certain time period defined based on the following clauses: the current and future value of the information; the costs, risks and liabilities associated ...
0
votes
1answer
120 views

How does one exercise their GDPR related rights?

In May, GDPR will become effective and have a global impact on how personal data is handled. Article 20 of the GDPR requires complying systems provide Data Portability. If a European citizen was to ...
0
votes
1answer
242 views

Is an incentivized consent considered freely given in GDPR?

Let's say someone offers you 50 bucks if you opt-in to a consent; would that consent be still considered freely given in the eyes of GDPR (General Data Protection Regulation)? My understanding is ...
0
votes
0answers
23 views

Corporate responsibility when allowing biometric authentication

At our company, we are discussing allowing (but not forcing) the use of facial recognition to authenticate on employee laptops (Windows Hello). The laptops are owned by the company, but are for ...
0
votes
0answers
44 views

Is it legal to display user airline seat info on a public platform with absolute user consent

Planning a public platform to display user seating info after taking proper user consent , will that still attract legalities if user is ok with it , will it fall under any legal clauses under GDPR ...
0
votes
0answers
19 views

Does my personal website GDPR compliant? [duplicate]

I made a basic chat website. Shows active users with nicknames or if not given nickname, random given name. There is no register or login I take users nickname and save it to cookies. Nickname can be ...
0
votes
0answers
15 views

Is a privacy policy required for storing user preferences?

I wanted to use localStorage (which I think technically counts as a cookie) to store a user's preferences in a simple web app. The stored data doesn't identify the user and is never sent to any sort ...
0
votes
0answers
19 views

Handling of names, emails, phone numbers and messages submitted through website forms under GDPR

I am developing a website for a one-man, Swedish, acupressure company. The site contains a contact form that requires the user to submit a name, email and message. It also contains a booking form that ...
0
votes
0answers
46 views

Is WhatsApp legally obligated to remove my chat on every device, based on the GDPR? [duplicate]

Dear Law StackExchange community, I'm attempting to get chat history removed with another party dating back a long time ago. I don't want the chats to remain existent on any device whatsoever, so I ...
0
votes
0answers
35 views

Data Privacy: Should a user be allowed to change another users profile information?

In a SaaS platform, should users be allowed to change other users profile information (things like Name, Gender, Company they work for etc)? What laws (US & EU) would give guidance either way? ...
0
votes
1answer
54 views

Which Cookies require consent for GDPR

I use a number of different cookies on my website for tracking and saving preference. I'm very confused about which can and cannot be set with and without consent under GDPR I'm certain I need ...
0
votes
0answers
48 views

Does USA have a law similar to GDPR that gives you the right to a copy of the information a religious organization has on you?

For some background: the EU "Data Protection Directive" is a European Union directive which regulates the processing of personal data within the European Union, as explained in this Wikipedia article. ...
0
votes
0answers
13 views

Are previous communiication preferences retained with form submissions?

I'm trying to understand the correct procedure when dealing with storing a users email subscription types, and the behaviour in relation to legitimate interest and consent to communicate. And the ...
0
votes
0answers
16 views

Complying with GDPR when storing emails and IPs for a refferal campaign

I want to start an email referral campaign to collect emails for the upcoming launch of a videogame and was warned that I need to comply with the GDPR rules of privacy. I'll be storing the email ...
0
votes
0answers
26 views

Application of the GDPR to emails one has sent [duplicate]

Reading https://gdpr-info.eu/issues/personal-data/, it seems you could use the GDPR for, well, unexpected request. For example, if I ask Google to remove any email from me I have send, not only from ...
0
votes
0answers
38 views

Single sign on via cookies and GDPR compliance?

Going to call my two sites "identity provider" and "WordPress site". Flow is: User logs in on identity provider User is redirected to Wordpress site with an SSO token in the URL parameter. SSO token ...

1 6 7 8 9 10